haxtheweb haxcms-php

• CVE-2026-46493 High 7.5 haxtheweb/haxcms-php uses insecure method for generating salt 0.3%
• CVE-2026-46400 High 8.7 HAXCMS PHP has a File Upload Validation Bypass 0.4%
• CVE-2026-46398 High 8.8 HAX CMS Missing Secure Flag on Cookie 0.2%
• CVE-2026-46397 Medium 6.5 haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0 0.3%
• CVE-2026-46511 High 8.7 HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack 0.3%
• CVE-2026-46394 High 7.7 HAX CMS Vulnerable to Command Injection using Git.php 0.8%
• CVE-2026-46393 High 7.1 HAXcms createSite SSRF Enables Arbitrary File Read 0.2%
• CVE-2026-46392 High 8.7 HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validation 0.3%
• CVE-2026-46390 Medium 6.9 HAX CMS has Unauthenticated Git Access via User-Controlled Key 0.3%
• CVE-2026-46399 Critical 9.4 Authenticated Remote Code Execution via File Overwrite 0.3%
• CVE-2026-48527 High 8.7 HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpoint 0.2%