CVE-2025-53642
11.07.2025, 18:15
haxcms-nodejs and haxcms-php are backends for HAXcms. The logout function within the application does not terminate a user's session or clear their cookies. Additionally, the application issues a refresh token when logging out. This vulnerability is fixed in 11.0.6.Enginsight
| Vendor | Product | Version |
|---|---|---|
| psu | haxcms-nodejs | 𝑥 < 11.0.6 |
| psu | haxcms-php | 𝑥 < 11.0.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration