PT-2025-52722
CVE-2025-67436
·
Published
2025-12-22
·
Updated
2025-12-23
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
PluXml CMS version 5.8.22
Description
An authenticated attacker with administrator panel access can execute arbitrary code remotely. This is achieved by injecting a malicious PHP webshell into a theme file, such as
home.php. The attack requires administrator privileges within the PluXml CMS panel.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾