← All advisories

Critical severity9.8NVD Advisory· Published Feb 26, 2025· Updated Jul 5, 2026

CVE-2025-25789

CVE-2025-25789

Description

FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Foxcms/Foxcms3 versions
cpe:2.3:a:foxcms:foxcms:1.2.5:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:foxcms:foxcms:1.2.5:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =1.2.5

Patches

Vulnerability mechanics

References

2

github.com/Ka7arotto/FoxCMS/blob/main/FoxCMS-rce3.mdnvdExploit
www.foxcms.cnnvdProduct

News mentions

0

No linked articles in our index yet.