Description
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.
High · 7.3
CVE-2025-56630
EUVD-2025-27146GHSA-q2jr-xg6p-fr64
FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.
Published Sep 8, 2025 · Updated Sep 8, 2025 · Assigned by mitre