pluxml vulnerabilities
CVEs whose affected-version data names the pluxml package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2025-15438Medium· 4.7A vulnerability was determined in PluXml up to 5.8.22
A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::__destruct of the file core/admin/medias.php of the component Media Management Module. Executing a manipulation of the argument File can lead …
▾ Sunlitpluxml · pluxmlEPSS 0.47%via NVD
CVE-2022-25020Medium· 5.4PoCA cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post.
A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post.
▾ Twilightpluxml · pluxmlEPSS 1.2%via NVD
CVE-2022-25018High· 8.8PoCPluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages.
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages.
▾ Midnightpluxml · pluxmlEPSS 2.7%via NVD