CVE-2025-29306
CRITICAL 9.8EPSS 46.3%
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 46.28% chance of exploitation in the next 30 days, 99th percentile
- Nuclei
- critical · CWE-94
- Published
- 2025-03-27
- Updated
- 2025-03-28
Proof-of-concept exploits (6)
- somatrasss/CVE-2025-293060★ · 2025-03-25
- Mattb709/CVE-2025-29306-PoC-FoxCMS-RCE4★ · 2025-04-27
- congdong007/CVE-2025-29306_poc0★ · 2025-05-10
- inok009/FOXCMS-CVE-2025-29306-POC1★ · 2025-04-22
- verylazytech/CVE-2025-293062★ · 2025-04-17
- mantanhacker/Mass-CVE-2025-29306