CVE-2025-45239: Qianfox Foxcms

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.

Affected products

• Qianfox Foxcms: version 2.0.6 only

Published 2025-05-05. Last modified 2026-06-17.