pluxml vulnerabilities (Ubuntu)

20 vulnerabilities.

• pluxml Ubuntu If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a... CVE-2025-70129 5.3 MediumMarch 10, 2026
• pluxml Ubuntu A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature... CVE-2025-70128 6.1 MediumMarch 10, 2026
• pluxml Ubuntu Session Fixation in PluXml CMS CVE-2026-24352 4.8 MediumFebruary 27, 2026
• pluxml Ubuntu Stored XSS in PluXml CMS CVE-2026-24351 5.1 MediumFebruary 27, 2026
• pluxml Ubuntu Stored XSS in PluXml CMS CVE-2026-24350 5.1 MediumFebruary 27, 2026
• pluxml Ubuntu PluXml Media Management medias.php __destruct deserialization CVE-2025-15438 5.1 MediumJanuary 2, 2026
• pluxml Ubuntu Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with... CVE-2025-67436 6.5 MediumDecember 22, 2025
• pluxml Ubuntu A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically... CVE-2025-57567 9.1 CriticalOctober 17, 2025
• pluxml Ubuntu A remote code execution (RCE) vulnerability in the component /PluXml/core/admin... CVE-2024-48138 9.8 CriticalOctober 29, 2024
• pluxml Ubuntu PluXml Blog v5.8.9 was discovered to contain a remote code execution (RCE) vulnerability in the... CVE-2024-22636 8.8 HighJanuary 25, 2024
• pluxml Ubuntu A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary... CVE-2022-25020 Public exploit 5.4 MediumMarch 1, 2022
• pluxml Ubuntu Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code... CVE-2022-25018 Public exploit 8.8 HighMarch 1, 2022
• pluxml Ubuntu A stored cross-site scripting (XSS) vulnerability in the component core/admin/medias.php of... CVE-2022-24587 5.4 MediumFebruary 15, 2022
• pluxml Ubuntu A stored cross-site scripting (XSS) vulnerability in the component /core/admin/comment.php of... CVE-2022-24585 5.4 MediumFebruary 15, 2022
• pluxml Ubuntu A stored cross-site scripting (XSS) vulnerability in the component /core/admin/categories.php of... CVE-2022-24586 5.4 MediumFebruary 15, 2022
• pluxml Ubuntu PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field. CVE-2021-38603 Public exploit 4.8 MediumAugust 12, 2021
• pluxml Ubuntu PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content. CVE-2021-38602 Public exploit 4.8 MediumAugust 12, 2021
• pluxml Ubuntu class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the... CVE-2020-18185 9.8 CriticalOctober 2, 2020
• pluxml Ubuntu In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote... CVE-2020-18184 7.2 HighOctober 2, 2020
• pluxml Ubuntu PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article... CVE-2017-1001001 5.4 MediumNovember 1, 2017