psu haxcms-php

Name: psu haxcms-php
Brand: psu

productUS

cpe:2.3:a:psu:haxcms-php:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical1high4medium0low

updated 2026-10-27

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-32028US	—	2.00% (81st)	—	10.0.3	2025-04-08	9.0.0 → 10.0.3
CVE-2025-49141US	high8.8	1.49% (74th)	—	11.0.0	2025-06-09	< 11.0.0
CVE-2025-54378US	—OT elevated	0.57% (47th)	—	11.0.9	2025-07-26	< 11.0.9
CVE-2025-49138US	—	0.52% (44th)	—	11.0.0	2025-06-09	< 11.0.0
CVE-2025-49139US	medium6.5	0.37% (31st)	—	11.0.0	2025-06-09	< 11.0.0
CVE-2025-54139US	medium6.1	0.36% (29th)	—	11.0.8	2025-07-23	11.0.0 → 11.0.8
CVE-2025-49137US	medium6.1	0.27% (20th)	—	11.0.0	2025-06-09	< 11.0.0
CVE-2025-53642US	medium6.5	0.19% (9th)	—	11.0.6	2025-07-11	< 11.0.6

The flaw types (CWEs) most of these CVEs share.

CWE-1021Improper Restriction of Rendered UI Layers or Frames2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-73External Control of File Name or Path1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.