CVE-2026-48527

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

May 29, 2026

Last Seen

May 29, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Severity Stored XSS Vulnerability in HAX CMS (CVE-2026-48527)74.0

CVE-2026-48527 is a stored cross-site scripting (XSS) vulnerability in HAX CMS, affecting versions up to 26.0.0. The vulnerability exists in the `/system/api/saveNode` endpoint, where authenticated users with page editing permissions can bypass the HTML sanitizer. This allows them to inject maliciou...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

High-Severity Stored XSS Vulnerability in HAX CMS (CVE-2026-48527)

May 29·2 sources

Related Articles (2)

CVE-2026-48527 AKAOMA CVE VULNERABILITIES / 6h HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a stored cross-site scripting (XSS) vulnerability in the `/system/api/saveNode` endpoint. An authenticated user with a permission to edit pages can bypass the HTML sanitizer by injecting an event handler attribute without whitespace before the attribute name. @haxtheweb/haxcms-nodejs 26.0.1 and haxcms-php 26.0.2 patch the issue.

cve.akaoma.com·May 29

CVE-2026-48527 - Exploits & Severity

Related Entities

Cwe-79 - Cross-site Scripting (xss)PHP HAX CMS NodeJS Node.js XSS HAX CMS Stored XSS Via Sanitizer Bypass