Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.5
CVSSv2

CVE-2022-24585

Published: 15/02/2022 Updated: 22/02/2022
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Subscribe to Pluxml

Vulnerability Summary

A stored cross-site scripting (XSS) vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the author parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

pluxml pluxml 5.8.7

Vendor Advisories

Debian CVElist Bug Report Logs: Multiple security issues
Debian Bug report logs - #1008264 Multiple security issues Package: src:pluxml; Maintainer for src:pluxml is Tanguy Ortolo <tanguy+debian@ortoloeu>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 25 Mar 2022 16:33:02 UTC Severity: grave Tags: security, upstream Found in version pluxml/56-1 Reply ...

References

CWE-79https://github.com/Nguyen-Trung-Kien/CVEhttps://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2022-24585/CVE-2022-24585.pdfhttps://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008264
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook