CVE-2025-70129中 5.3If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that…
CVE-2025-70128中 6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier. The …
CVE-2026-24352緊急 9.8PluXml CMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authenticat…
CVE-2026-24351中 5.4PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing privileges can inject arbitrary HTML and…
CVE-2026-24350中 5.4PluXml CMS is vulnerable to Stored XSS in file uploading functionality. An authenticated attacker can upload an SVG file containing a malici…