CVE-2025-57567

n/a / n/a PUBLISHED

Description (CNA)

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel, enabling execution of system commands.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/lukehebe/Vulnerability-Disclosures/blob/main/CVE-2025-57567.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.