CVE-2025-45238: Qianfox Foxcms

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.

Affected products

• Qianfox Foxcms: version 1.2.5 only

Published 2025-05-05. Last modified 2026-06-17.