Vulnerabilidades en haxtheweb
33 resultadosAnálisis Vexday
A haxtheweb apresenta 33 vulnerabilidades catalogadas, com 17 divulgadas nos últimos 90 dias, indicando exposição contínua a novos riscos. Nenhuma está sob exploração ativa documentada (KEV), mas 6 atingem severidade crítica, com a injeção de conteúdo (CWE-79) dominando o perfil de vulnerabilidade. O ritmo acelerado de descobertas recentes sugere necessidade de monitoramento próximo e priorização das críticas.
CVE-2026-46393HIGHHAXcms createSite SSRF Enables Arbitrary File ReadEPSS 0.4%CVE-2026-46392HIGHHAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload ValidationEPSS 0.4%CVE-2026-48527HIGHHaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpointEPSS 0.4%CVE-2025-49139MEDIUM@haxtheweb/haxcms-nodejs Iframe Phishing vulnerabilityEPSS 0.4%CVE-2025-48996MEDIUMUnauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API EndpointEPSS 0.4%CVE-2025-54137HIGHNodeJS version of the HAX CMS application is distributed with Default SecretsEPSS 0.3%CVE-2025-54139MEDIUMHAX CMS' application pages are vulnerable to clickjackingEPSS 0.3%CVE-2026-46395CRITICALHAX CMS Vulnerable to Private Key Disclosure via Broken HMAC ImplementationEPSS 0.3%CVE-2025-54129MEDIUMHAXiam allows for User EnumerationEPSS 0.3%CVE-2026-46398HIGHHAX CMS Missing Secure Flag on CookieEPSS 0.3%CVE-2025-49137HIGHHax CMS Stored Cross-Site Scripting vulnerabilityEPSS 0.3%CVE-2025-54128HIGHHAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site ScriptingEPSS 0.2%CVE-2025-53642MEDIUMhaxcms-nodejs and haxcms-php Improperly Terminate SessionsEPSS 0.2%