High severity7.2NVD Advisory· Published Oct 2, 2020· Updated Jun 17, 2026

CVE-2020-18184

Description

In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.

Affected products

Pluxxml/Pluxxml
cpe:2.3:a:pluxxml:pluxxml:5.7:*:*:*:*:*:*:*
PluxXml/PluxXmldescription
Pluxml/Pluxmlllm-fuzzy
Range: = V5.7

Patches

Vulnerability mechanics

References

github.com/pluxml/PluXml/issues/320nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000