Advisories · Technology

QianFox FoxCMS.

Every CVE that names QianFox FoxCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9609 CVE record

CVSS 5.1 Medium

QianFox FoxCMS Admin.php edit password recovery
- QianFox FoxCMS
- CWE-640
Not analysed yet 27 May 2026
CVE-2026-9608 CVE record

CVSS 4.8 Medium

QianFox FoxCMS Administrator Backend edit cross site scripting
- QianFox FoxCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 27 May 2026
CVE-2025-12920 CVE record

CVSS 4.8 Medium

qianfox FoxCMS Product.php edit cross site scripting
- qianfox FoxCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 9 Nov 2025
CVE-2025-11306 CVE record

CVSS 5.3 Medium

qianfox FoxCMS Search cross site scripting
- qianfox FoxCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 5 Oct 2025
CVE-2025-7568 CVE record

CVSS 5.3 Medium

qianfox FoxCMS Video.php batchCope sql injection
- qianfox FoxCMS
- Other injection
- SQL injection
Not analysed yet 14 Jul 2025
CVE-2025-6094 CVE record

CVSS 5.3 Medium

qianfox FoxCMS Download.php batchCope sql injection
- qianfox FoxCMS
- Other injection
- SQL injection
Not analysed yet 15 Jun 2025
CVE-2025-5155 CVE record

CVSS 5.3 Medium

qianfox FoxCMS Article.php batchCope sql injection
- qianfox FoxCMS
- Other injection
- SQL injection
Not analysed yet 25 May 2025