haxtheweb Iframe Loader Vulnerabilities

Haxtheweb Iframe-loader vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

5 June 2026

HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeover
CVE-2026-46396
HaxthewebHaxcms-nodejs9.3CRITICAL