CVE-2022-25018

PoC ×2—

CVSS 3.1

8.8 high

EPSS

3%p85

Published

Mar 1, 2022 (Mar 1, 2022)

Modified

Jul 9, 2026

Description

Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages.

Vendors: pluxml
Products: pluxml
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.