VYPR
← All advisories
High severity7.2NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-18184

CVE-2020-18184

Description

In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.

Affected products

3
  • Pluxml/Pluxmlllm-fuzzy
    Range: = V5.7
  • Pluxxml/Pluxxml2 versions
    cpe:2.3:a:pluxxml:pluxxml:5.7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pluxxml:pluxxml:5.7:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.