HaxCMS Stored XSS Bypass via Event Handler Injection in saveNode
Security AdvisoryHighhaxtheweb
Affected:
- @haxtheweb/haxcms-nodejs <=26.0.0
- haxcms-php <=26.0.0
Fixed in:
- @haxtheweb/haxcms-nodejs 26.0.1
- haxcms-php 26.0.2
Referenced CVEs: CVE-2026-48527 · 8.7
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.