PluXml Blog v5.8.9 was discovered to contain a remote code execution (RCE) vulnerability in the Static Pages feature. This vulnerability is exploited via injecting a crafted payload into the Content field.
References
| Link | Resource |
|---|---|
| https://github.com/capture0x/PluXml-RCE/blob/main/PluXml.txt | Exploit |
| https://github.com/capture0x/PluXml-RCE/blob/main/PluXml.txt | Exploit |
Configurations
History
21 Nov 2024, 08:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/capture0x/PluXml-RCE/blob/main/PluXml.txt - Exploit |
29 Jan 2024, 15:57
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Pluxml pluxml
Pluxml |
|
| References | () https://github.com/capture0x/PluXml-RCE/blob/main/PluXml.txt - Exploit | |
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CPE | cpe:2.3:a:pluxml:pluxml:5.8.9:*:*:*:*:*:*:* |
25 Jan 2024, 21:52
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-25 21:15
Updated : 2024-11-21 08:56
NVD link : CVE-2024-22636
Mitre link : CVE-2024-22636
CVE.ORG link : CVE-2024-22636
JSON object : View
Products Affected
pluxml
- pluxml
CWE