What’s Vulnerable › Products

qianfox FoxCMS vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your qianfox FoxCMS version is affected

Latest qianfox FoxCMS vulnerabilities

• CVE-2026-9609 — QianFox FoxCMS Admin.php edit password recovery (CVSS 4.7)
• CVE-2026-9608 — QianFox FoxCMS Administrator Backend edit cross site scripting (CVSS 2.4)
• CVE-2025-11306 — qianfox FoxCMS Search cross site scripting (CVSS 6.1)
• CVE-2025-51650 — (CVSS 5.6)
• CVE-2025-7568 — qianfox FoxCMS Video.php batchCope sql injection (CVSS 8.8)
• CVE-2025-6094 — qianfox FoxCMS Download.php batchCope sql injection (CVSS 8.8)
• CVE-2025-45239 — (CVSS 5.3)
• CVE-2025-45238 — (CVSS 9.1)
• CVE-2025-45240 — (CVSS 6.5)
• CVE-2025-2653 — FoxCMS improper authorization (CVSS 4.3)
• CVE-2024-12901 — FoxCMS API Endpoint Site.php improper authorization (CVSS 5.3)
• CVE-2024-12900 — FoxCMS Configuration File installdb.php code injection (CVSS 9.8)