CVEs affecting projects tracked on Release Alert, from NVD & OSV.
FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.