FoxCMS Cross-Site Scripting Vulnerability in Article Index Page
Vulnerability
A cross-site scripting (XSS) vulnerability has been identified in FoxCMS version 1.2.6. The issue resides in the article index page, specifically within the 'index.php/article' endpoint. This vulnerability allows attackers to execute arbitrary code by injecting malicious scripts that are executed in the context of the user's browser.
Impact
Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject and execute malicious scripts in the context of the user's session.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
6.4remediation
0.0relevance
0.4threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.