Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨Critical - FoxCMS Case Display Page Code Injection RCE (CVE-2025-29306) FoxCMS 1.2.5 index.html case display page fails to properly sanitize attacker-controlled input before it’s interpreted/executed, enabling remote code injection. A remote attacker can send crafted parameters to the case display endpoint to achieve arbitrary code execution on the server. 👉Affected: FoxCMS 1.2.5
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | foxcms | foxcms | - | - | - |