CVE-2024-12901 | FoxCMS up to 1.2 API Endpoint Site.php password improper authorization

A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/Site.php of the component API Endpoint. The manipulation of the argument password leads to improper authorization.

This vulnerability is known as CVE-2024-12901. The attack can be launched remotely. Furthermore, there is an exploit available.