CVE-2025-45238

foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2025-05-05

Last modified

2025-05-06

Weaknesses

CWE-22

Affected products

• Foxcms (Qianfox)

References

• https://gist.github.com/chao112122/27010786774f2bb584cc715fb027b95c
• https://gitee.com/qianfox/foxcms