CVE-2025-55420

A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...

CVE-2025-55420

A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...

CVE-2025-55420

The FoxCMS content management system version 1.2.6 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability in the /index.php endpoint. The root cause is the unsanitized reflection of scripts sent via a GET request into the HTML response. This allows an attacker to execute arbitrary ...