EDB-52526

PoC

HAX CMS 24.x - Stored Cross-Site Scripting (XSS)

view exploit source exploit_dbtype webappsauthor banyamerpublished 2026-04-29catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-22704US	medium5.4	1.03% (63rd)	Exploit	2026-01-10
HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to before 25.0.0, HAX CMS is vulnerable to stored XSS, which could lead to account takeover.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.