CVE-2025-49141

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the "gitImportSite" functionality obtains a URL string from a POST request and insufficiently validates user input. The "setremote" function later passes this input into "procopen", yielding O...