Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2022-24585

A stored cross-site scripting (XSS) vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Pluxml
Products
Pluxml
CVE-2021-38603

PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.

CVSS 3.1 · 4.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Pluxml
Products
Pluxml
CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Pluxml
Products
Pluxml
CVE-2020-18185

class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Pluxml
Products
Pluxml