CVE-2022-25020
A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post.
- Affected products
- Pluxml
- Pluxml
- = 5.8.7
- CVSS 3.1
- 5.4 MEDIUM
- EPSS
- 1.2% (66th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2022-03-01
CVE-2022-25020 at NVD
1 known exploit for CVE-2022-25020
Proof-of-concept code and exploit modules indexed by Sploitus