PT-2025-19753 · Foxcms · Foxcms

Chao112122

·

CVE-2025-45238

·

Published

2025-05-05

·

Updated

2025-06-12

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions foxcms version 1.2.5
Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the delRestoreSerie method.
Recommendations For foxcms version 1.2.5, consider disabling the delRestoreSerie method until a patch is available to prevent arbitrary file deletion.

Exploit

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-45238

Affected Products

Foxcms