RajChowdhury240/CVE-2025-67435

RajChowdhury240/CVE-2025-67435

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
A critical Remote Code Execution (RCE) vulnerability has been identified in PluXML CMS version 5.8.22. This vulnerability allows authenticated administrators to execute arbitrary PHP code on the web server by uploading malicious PHP web shells through the theme editor functionality.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-67436↗
6.5 MEDIUM—

Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with administrator panel access to inject a malicious PHP webshell into a theme file (e.g., home.php).