Browse CVEs

HIGH 7.5 CVE-2026-35185 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to 25.0.0, the /server-status endpoint is publicly accessible and exposes … Haxiam No fix yet Fix from $1,9502026-04-06 MEDIUM 5.4 CVE-2026-22704 HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which … Haxcms Nodejs Patch available Fix from $1,6002026-01-10 HIGH 8.3 CVE-2025-54378 HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 … Haxcms Nodejs 11.0.9 / 11.0.14+ Fix from $1,9502025-07-26 MEDIUM 6.1 CVE-2025-54139 HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend. In haxcms-nodejs versions 11.0.12 and below and in haxcms-php v… Haxcms Nodejs 11.0.8 / 11.0.13+ Fix from $1,6002025-07-23 HIGH 7.3 CVE-2025-54137 HAX CMS NodeJS allows users to manage their microsite universe with a NodeJS backend. Versions 11.0.9 and below were distributed with hardcoded defau… Haxcms Nodejs 11.0.10+ Fix from $1,9502025-07-22 CRITICAL 9.8 CVE-2025-54127 HAXcms with nodejs backend allows users to start the server in any HAXsite or HAXcms instance. In versions 11.0.6 and below, the NodeJS version of HA… Haxcms Nodejs 11.0.7+ Fix from $2,3002025-07-21 MEDIUM 6.5 CVE-2025-54134 HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application cr… Haxcms Nodejs 11.0.9+ Fix from $1,6002025-07-21 MEDIUM 6.1 CVE-2025-54128 HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the NodeJS version of HAX CMS has… Haxcms Nodejs 11.0.8+ Fix from $1,6002025-07-21 MEDIUM 6.5 CVE-2025-53642 haxcms-nodejs and haxcms-php are backends for HAXcms. The logout function within the application does not terminate a user's session or clear their c… Haxcms Nodejs 11.0.6+ Fix from $1,6002025-07-11 HIGH 8.8 CVE-2025-49141 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a … Haxcms Nodejs 11.0.0 / 11.0.3+ Fix from $1,9502025-06-09 MEDIUM 6.5 CVE-2025-49138 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) … Haxcms Php 11.0.0+ Fix from $1,6002025-06-09 MEDIUM 6.5 CVE-2025-49139 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a w… Haxcms Nodejs 11.0.0+ Fix from $1,6002025-06-09 MEDIUM 6.1 CVE-2025-49137 HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently saniti… Haxcms Nodejs 11.0.0+ Fix from $1,6002025-06-09 CRITICAL 9.9 CVE-2025-32028 HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a ’… Haxcms Php 10.0.3+ Fix from $2,3002025-04-08