Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-29306


An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.


Published

2025-03-27T19:15:49.290

Last Modified

2025-06-09T18:02:02.093

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-94

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application foxcms foxcms < 1.2 Yes

References