Логотип exploitDog
bind:CVE-2026-22704
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-22704

Количество 2

Количество 2

nvd логотип

CVE-2026-22704

около 1 месяца назад

HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been patched in version 25.0.0.

CVSS3: 8
EPSS: Низкий
github логотип

GHSA-3fm2-xfq7-7778

27 дней назад

HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover

CVSS3: 8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-22704

HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover. This issue has been patched in version 25.0.0.

CVSS3: 8
0%
Низкий
около 1 месяца назад
github логотип
GHSA-3fm2-xfq7-7778

HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover

CVSS3: 8
0%
Низкий
27 дней назад

Уязвимостей на страницу