Login Request a demo
HA
Product
Haxcms-nodejs
by Psu · last CVE Jan 10, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 3Medium 7Low 0
Severity
All severities11Critical1High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Haxcms-nodejs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54127
9.8
0%
Jul 21
HAXcms's Insecure Default Configuration Leads to Unauthenticated Access
Affected: before 11.0.7
CVE-2025-49141
8.8
1%
Jun 9
HaxCMS-PHP Command Injection Vulnerability
Affected: before 11.0.3
CVE-2025-54378
8.3
1%
Jul 26
HAX CMS Backend Lacks Comprehensive Authorization Checks
Affected: before 11.0.14
CVE-2025-54137
7.3
0%
Jul 22
NodeJS version of the HAX CMS application is distributed with Default Secrets
Affected: before 11.0.10
CVE-2025-54134
6.5
0%
Jul 21
HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service
Affected: before 11.0.9
CVE-2025-53642
6.5
0%
Jul 11
haxcms-nodejs and haxcms-php Improperly Terminate Sessions
Affected: before 11.0.6
CVE-2025-49139
6.5
0%
Jun 9
@haxtheweb/haxcms-nodejs Iframe Phishing vulnerability
Affected: before 11.0.0
CVE-2025-54139
6.1
0%
Jul 22
HAX CMS' application pages are vulnerable to clickjacking
Affected: 11.0.6 before 11.0.13
CVE-2025-54128
6.1
0%
Jul 21
HAX CMS NodeJs's Disabled Content Security Policy Enables Cross-Site Scripting
Affected: before 11.0.8
CVE-2025-49137
6.1
0%
Jun 9
Hax CMS Stored Cross-Site Scripting vulnerability
Affected: before 11.0.0
CVE-2026-22704
5.4
1%
Jan 10
HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
Affected: 11.0.6
Showing 11