Unscored severity · published Aug 26, 2012
CVE-2012-4675
Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PL
Pluxml · Pluxml
through 5.1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4675
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4675
Vendor Advisory
http://secunia.com/advisories/49026
telechargements.pluxml.org
http://telechargements.pluxml.org/changelog
www.pluxml.org
http://www.pluxml.org/article59/sortie-de-pluxml-5-1-6
www.securityfocus.com
http://www.securityfocus.com/bid/53367
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75331
More from Pluxml
9.8
CVE-2026-24352
Session Fixation in PluXml CMS
9.8
CVE-2024-48138
A remote code execution (RCE) vulnerability in the component /PluXml/core/admin/parametres_edittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via…
9.8
CVE-2020-18185
class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment
8.8
CVE-2024-22636
PluXml Blog v5.8.9 was discovered to contain a remote code execution (RCE) vulnerability in the Static Pages feature
8.8
CVE-2022-25018
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages