Vendor

    QianFox

    14 known vulnerabilities in products by QianFox, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in QianFox
    CriticalCVE-2025-45238

    FoxCMS: security vulnerability

    		9.1
    CriticalCVE-2024-12900

    FoxCMS Configuration File installdb.php code injection

    		6.3
    MediumCVE-2024-12901

    FoxCMS API Endpoint Site.php improper authorization

    		5.3
    MediumCVE-2025-45239

    FoxCMS: Path Traversal

    		5.3
    HighCVE-2025-5155

    qianfox FoxCMS Article.php batchCope sql injection

    also in 1 other product

    		6.3
    HighCVE-2025-7568

    qianfox FoxCMS Video.php batchCope sql injection

    		6.3
    HighCVE-2025-6094

    qianfox FoxCMS Download.php batchCope sql injection

    		6.3
    MediumCVE-2025-45240

    FoxCMS: SQL Injection

    		6.5
    MediumCVE-2026-9609

    QianFox FoxCMS Admin.php edit password recovery

    		4.7
    MediumCVE-2025-11306

    qianfox FoxCMS Search cross site scripting

    		4.3
    MediumCVE-2025-51650

    FoxCMS: Unrestricted File Upload

    		5.6
    MediumCVE-2026-9608

    QianFox FoxCMS Administrator Backend edit cross site scripting

    		2.4
    MediumCVE-2025-12920

    qianfox FoxCMS Product.php edit cross site scripting

    also in 1 other product

    		2.4
    MediumCVE-2025-2653

    FoxCMS improper authorization

    		4.3

    Products

    Products by QianFox
    FoxCMS140