In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.

Published Aug 27, 2025 · Updated Jul 5, 2026 · Assigned by mitre