CVE-2025-29306
Critical · 9.8CVSS
9.8
EPSS
46.6%
Published
Mar 27, 2025
CISA due date
—
The record
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|