CVE-2025-67436 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with administrator panel access to inject a malicious PHP webshell into a them…
Medium CVSS: 6.5

CVE-2025-67436

Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with administrator panel access to inject a malicious PHP webshell into a theme file (e.g., home.php).
Vendor
Pluxml
Product
Pluxml
CWE
CWE-77
Yayın Tarihi
2025-12-22 22:16:08
Güncelleme
2026-01-02 16:58:24
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-77 Pluxml MEDIUM Pluxml 2025

Referanslar

https://github.com/RajChowdhury240/CVE-2025-67435/ https://github.com/pluxml/PluXml