In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds