2026-01-11 · 2 min · BitNinja Team

New XSS Vulnerability in HAX CMS Requires Immediate Action

The recent discovery of a critical stored Cross-Site Scripting (XSS) vulnerability in HAX CMS versions 11.0.6 to 25.0.0 requires immediate attention from system administrators and hosting providers. This vulnerability, identified as CVE-2026-22704, poses a significant risk as...