CVE-2025-56435

概要

参考情報

• yuque.com/g/u43151774/zhyb2o/udq6lsnv80vnhbr4/collaborator/join · Permissions Required

foxcms のその他の脆弱性

• CVE-2025-12920中 4.8A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controll…
• CVE-2025-10251緊急 9.8A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images…
• CVE-2025-56630高 7.3FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.
• CVE-2025-55422高 8.8In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.
• CVE-2025-55409高 8.8FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code.