FoxCMS Reflected Cross-Site Scripting Vulnerability in index.php

A reflected cross-site scripting vulnerability has been identified in FoxCMS version 1.2.6, specifically in the index.php file. This vulnerability allows for the execution of arbitrary JavaScript code. It occurs when a crafted script is sent via a GET request, where it is reflected unsanitized in the HTML response. This exploitation is possible when a logged-in user submits the malicious input.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute arbitrary JavaScript in the context of the user's browser session.