CVE-2025-67436

n/a / n/a PUBLISHED

Description (CNA)

Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.22 allows an attacker with administrator panel access to inject a malicious PHP webshell into a theme file (e.g., home.php).

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/pluxml/PluXml
https://github.com/RajChowdhury240/CVE-2025-67435/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.