CVE-2025-56630

Description

FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Column.php file.

PUBLISHED Reserved 2025-08-17 | Published 2025-09-08 | Updated 2025-09-08 | Assigner mitre

References

www.foxcms.cn/

cve.org (CVE-2025-56630)

nvd.nist.gov (CVE-2025-56630)

Download JSON