Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8mq4-gpfh-jrx9

Опубликовано: 17 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel, enabling execution of system commands.

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel, enabling execution of system commands.

EPSS

Процентиль: 58%
0.00363
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.1
ubuntu
4 месяца назад

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel, enabling execution of system commands.

CVSS3: 9.1
nvd
4 месяца назад

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel, enabling execution of system commands.

CVSS3: 9.1
debian
4 месяца назад

A remote code execution (RCE) vulnerability exists in the PluXml CMS t ...

EPSS

Процентиль: 58%
0.00363
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-94