CVE-2022-25020

概要

参考情報

• MoritzHuppert/CVE-2022-25020 · Exploit
• cvedetails.com/cve/CVE-2021-38602 · Third Party Advisory
• youtu.be/TsGp-QB5XWI · Exploit

pluxml のその他の脆弱性

• CVE-2025-70129中 5.3If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that…
• CVE-2025-70128中 6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier. The …
• CVE-2026-24352緊急 9.8PluXml CMS allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authenticat…
• CVE-2026-24351中 5.4PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing privileges can inject arbitrary HTML and…
• CVE-2026-24350中 5.4PluXml CMS is vulnerable to Stored XSS in file uploading functionality. An authenticated attacker can upload an SVG file containing a malici…