CVE-2022-25020

A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail…

published March 1, 2022

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01194 · 67.8th percentile
Published
2022-03-01T01:26Z
EPSS history
Timeline
  • 01 MAR 01:26Z
    A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail…
    cvelistv5