← All advisories

High severity8.8NVD Advisory· Published Aug 27, 2025· Updated Jul 5, 2026

CVE-2025-55422

CVE-2025-55422

Description

In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.

Affected products

3

Foxcms/Foxcms3 versions
cpe:2.3:a:foxcms:foxcms:1.2.6:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:foxcms:foxcms:1.2.6:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =1.2.6

Patches

Vulnerability mechanics

References

1

www.notion.so/CVE-2025-55422-2222b2fd0210803c8ae8cfefeb5e9c88nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.