agentprime: haxtheweb-haxcms-phpEvery new CVE for haxtheweb-haxcms-php.https://agentprime.io/CVE-2026-46493: haxtheweb/haxcms-php uses insecure method for generating salthttps://agentprime.io/advisories/CVE-2026-46493/https://agentprime.io/advisories/CVE-2026-46493/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 19:19:37 GMTCVECVE-2026-46400: HAXCMS PHP has a File Upload Validation Bypasshttps://agentprime.io/advisories/CVE-2026-46400/https://agentprime.io/advisories/CVE-2026-46400/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 19:15:29 GMTCVECVE-2026-46398: HAX CMS Missing Secure Flag on Cookiehttps://agentprime.io/advisories/CVE-2026-46398/https://agentprime.io/advisories/CVE-2026-46398/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 19:13:47 GMTCVECVE-2026-46397: haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0https://agentprime.io/advisories/CVE-2026-46397/https://agentprime.io/advisories/CVE-2026-46397/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 19:11:52 GMTCVECVE-2026-46394: HAX CMS Vulnerable to Command Injection using Git.phphttps://agentprime.io/advisories/CVE-2026-46394/https://agentprime.io/advisories/CVE-2026-46394/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 18:26:00 GMTCVECVE-2026-46392: HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validationhttps://agentprime.io/advisories/CVE-2026-46392/https://agentprime.io/advisories/CVE-2026-46392/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 18:20:25 GMTCVECVE-2026-46390: HAX CMS has Unauthenticated Git Access via User-Controlled Keyhttps://agentprime.io/advisories/CVE-2026-46390/https://agentprime.io/advisories/CVE-2026-46390/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 18:16:17 GMTCVECVE-2026-46399: Authenticated Remote Code Execution via File Overwritehttps://agentprime.io/advisories/CVE-2026-46399/https://agentprime.io/advisories/CVE-2026-46399/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 18:13:15 GMTCVEcritical