Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Haxiam HIGH 7.5
CVE-2026-35185

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to 25.0.0, the /server-status endpoint is publicly accessible and exposes …

No fix yet
Fix from $1,950 2026-04-06
Haxcms Nodejs MEDIUM 5.4
CVE-2026-22704

HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which …

Patch available
Fix from $1,600 2026-01-10
Haxcms Nodejs HIGH 8.3
CVE-2025-54378

HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 …

Fix: 11.0.9 / 11.0.14+
Fix from $1,950 2025-07-26
Haxcms Nodejs MEDIUM 6.1
CVE-2025-54139

HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend. In haxcms-nodejs versions 11.0.12 and below and in haxcms-php v…

Fix: 11.0.8 / 11.0.13+
Fix from $1,600 2025-07-23
Haxcms Nodejs HIGH 7.3
CVE-2025-54137

HAX CMS NodeJS allows users to manage their microsite universe with a NodeJS backend. Versions 11.0.9 and below were distributed with hardcoded defau…

Fix: 11.0.10+
Fix from $1,950 2025-07-22
Haxcms Nodejs CRITICAL 9.8
CVE-2025-54127

HAXcms with nodejs backend allows users to start the server in any HAXsite or HAXcms instance. In versions 11.0.6 and below, the NodeJS version of HA…

Fix: 11.0.7+
Fix from $2,300 2025-07-21
Haxcms Nodejs MEDIUM 6.5
CVE-2025-54134

HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application cr…

Fix: 11.0.9+
Fix from $1,600 2025-07-21
Haxcms Nodejs MEDIUM 6.1
CVE-2025-54128

HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the NodeJS version of HAX CMS has…

Fix: 11.0.8+
Fix from $1,600 2025-07-21
Haxcms Nodejs MEDIUM 6.5
CVE-2025-53642

haxcms-nodejs and haxcms-php are backends for HAXcms. The logout function within the application does not terminate a user's session or clear their c…

Fix: 11.0.6+
Fix from $1,600 2025-07-11
Haxcms Nodejs HIGH 8.8
CVE-2025-49141

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a …

Fix: 11.0.0 / 11.0.3+
Fix from $1,950 2025-06-09
Haxcms Php MEDIUM 6.5
CVE-2025-49138

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) …

Fix: 11.0.0+
Fix from $1,600 2025-06-09
Haxcms Nodejs MEDIUM 6.5
CVE-2025-49139

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a w…

Fix: 11.0.0+
Fix from $1,600 2025-06-09
Haxcms Nodejs MEDIUM 6.1
CVE-2025-49137

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently saniti…

Fix: 11.0.0+
Fix from $1,600 2025-06-09
Haxcms Php CRITICAL 9.9
CVE-2025-32028

HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a ’…

Fix: 10.0.3+
Fix from $2,300 2025-04-08