CVE-2025-45240: Qianfox Foxcms

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php.

Affected products

• Qianfox Foxcms: version 1.2.5 only

Published 2025-05-05. Last modified 2026-06-17.