CVE Catalog
CVE-2022-25018
HighCVSS 8.8Exploitation Probability (EPSS)
High risk2.52%
83th percentile - higher than 83% of all known CVEs
Summary
Pluxml version 5.8.7 was found to allow attackers to execute arbitrary code by injecting crafted PHP code into static pages.
Risk Assessment
An attacker can take over the server, steal data, or install malware, posing a serious threat to system integrity and confidentiality.
Recommendation
Immediately update Pluxml to the latest available version and remove or secure static pages against code injection.
Other vulnerabilities in Pluxml
Original NVD description (English source)
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS