[MEDIUM] HAX CMS vulnerable to Local File Inclusion via saveOutline API Location Parameter

PKSA-55mh-q49p-tqr3 CVE-2025-49138 GHSA-hxrr-x32w-cg8g

Affected package: elmsln/haxcms

Affected version: <11.0.0

Reported by:
GitHub