critical9.8
CVE-2025-25789
FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php.
Impact
FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxcms | Foxcms | Version 1.2.5 |