Junglewise Threat Intelligence

CVE-2025-49137: Hax CMS Stored Cross-Site Scripting vulnerability

CVE-2025-49137 · Severity: low · CVSS 3.1 · Published 2025-06-09

Technologies: elmsln/haxcms (Packagist). Vendors: Packagist.

Executive brief

Hax CMS Stored Cross-Site Scripting vulnerability

Affected products

  • Packagist elmsln/haxcms

Related threats