Security Advisory

CVE-2025-53642

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-11 17:33:05
Last updated 2025-07-14 14:17:55
Assigner GitHub_M
CVSS score not scored
State PUBLISHED

Description

haxcms-nodejs and haxcms-php are backends for HAXcms. The logout function within the application does not terminate a user's session or clear their cookies. Additionally, the application issues a refresh token when logging out. This vulnerability is fixed in 11.0.6.