Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Qianfox
Foxcms

qianfox foxcms Vulnerabilities: CVEs, CISA KEV & Security Advisories

14 CVEs

qianfox foxcms Vulnerabilities

CVE security advisories and vulnerability history for foxcms by qianfox.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

13

Public exploits

With known exploit

6.0

Avg CVSS

2024–2026

Last updated May 27, 2026

Overview

qianfox foxcms has 14 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 13 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting qianfox foxcms, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of qianfox foxcms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium13

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of qianfox foxcms's CVEs are currently listed in CISA's KEV catalog.

Public exploits

13

13 of qianfox foxcms's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every qianfox foxcms version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.2.05 CVEs
1.2.15 CVEs
1.2.25 CVEs
1.2.35 CVEs
1.2.45 CVEs
1.2.55 CVEs
1.2.63 CVEs
1.01 CVE
1.11 CVE
1.21 CVE
1.2.101 CVE
1.2.111 CVE
1.2.121 CVE
1.2.131 CVE
1.2.141 CVE
1.2.151 CVE
1.2.161 CVE
1.2.71 CVE
1.2.81 CVE
1.2.91 CVE

Find a version

14 CVEs

Sort

QianFox FoxCMS Admin.php edit password recovery
CVE-2026-9609
Public exploit
CWE-640
Medium · CVSS 5.1
EPSS 0.0% (15th pct)2026-05-27
QianFox FoxCMS Administrator Backend edit cross site scripting
CVE-2026-9608
Public exploit
CWE-79
Medium · CVSS 4.8
EPSS 0.0% (10th pct)2026-05-27
qianfox FoxCMS Product.php edit cross site scripting
CVE-2025-12920
Public exploit
CWE-94
Medium · CVSS 4.8
EPSS 0.0% (16th pct)2025-11-09
qianfox FoxCMS Search cross site scripting
CVE-2025-11306
Public exploit
CWE-94
Medium · CVSS 5.3
EPSS 0.0% (8th pct)2025-10-05
qianfox FoxCMS Video.php batchCope sql injection
CVE-2025-7568
Public exploit
CWE-89
Medium · CVSS 6.3
EPSS 0.2% (44th pct)2025-07-14
Medium vulnerability · 2025-07-14
CVE-2025-51650
Public exploit
CWE-77
Medium · CVSS 5.6
EPSS 0.6% (69th pct)2025-07-14
qianfox FoxCMS Download.php batchCope sql injection
CVE-2025-6094
Public exploit
CWE-89
Medium · CVSS 6.3
EPSS 0.2% (44th pct)2025-06-15
qianfox FoxCMS Article.php batchCope sql injection
CVE-2025-5155
Public exploit
CWE-89
Medium · CVSS 6.3
EPSS 0.2% (45th pct)2025-05-25
Medium vulnerability · 2025-05-05
CVE-2025-45240CWE-89
Medium · CVSS 6.5
EPSS 0.2% (42th pct)2025-05-05
Medium vulnerability · 2025-05-05
CVE-2025-45239
Public exploit
CWE-22
Medium · CVSS 5.3
EPSS 0.3% (54th pct)2025-05-05
Critical vulnerability · 2025-05-05
CVE-2025-45238
Public exploit
CWE-22
Critical · CVSS 9.1
EPSS 1.9% (84th pct)2025-05-05
FoxCMS improper authorization
CVE-2025-2653
Public exploit
CWE-285
Medium · CVSS 5.3
EPSS 0.2% (41th pct)2025-03-23
Medium vulnerability · 2024-12-23
CVE-2024-12901
Public exploit
CWE-285
Medium · CVSS 6.9
EPSS 0.1% (34th pct)2024-12-23
Medium vulnerability · 2024-12-23
CVE-2024-12900
Public exploit
CWE-74
Medium · CVSS 6.3
EPSS 0.2% (38th pct)2024-12-23

Common weakness types

The CWE weakness categories most often found in qianfox foxcms CVEs. Follow any weakness for its full explanation.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-285Improper Authorization2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVE
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVE
CWE-640Weak Password Recovery Mechanism for Forgotten Password1 CVE
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVE

Disclosure activity by year

How many qianfox foxcms CVEs were published each year.

2024

2

2025

10

2026

2

Other qianfox products

Browse vulnerabilities for other products by qianfox.

All qianfox vulnerabilities

Frequently asked questions

Common questions about qianfox foxcms vulnerabilities.

How many CVEs does qianfox foxcms have?

qianfox foxcms has 14 published CVE records since 2024.

How many qianfox foxcms CVEs are in CISA KEV?

None of qianfox foxcms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for qianfox foxcms vulnerabilities?

Yes — 13 of qianfox foxcms's CVEs have a known public exploit.

Which versions of qianfox foxcms are affected?

20 distinct qianfox foxcms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in qianfox foxcms CVEs?

qianfox foxcms's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-285 (Improper Authorization), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical qianfox foxcms vulnerabilities are there?

qianfox foxcms has 1 critical and 0 high-severity CVEs.

What is the average severity of qianfox foxcms CVEs?

The average CVSS base score across qianfox foxcms's scored CVEs is 6.0.

References

All qianfox vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track qianfox foxcms vulnerabilities

Monitor new qianfox foxcms vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References