CVE-2025-56630: Foxcms

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.

Affected products

• Foxcms Foxcms: up to and including 1.2.5

Published 2025-09-08. Last modified 2026-06-17.