CVE-2025-70128

PluXml versions 5.8.22 and earlier are vulnerable to a Stored Cross-Site Scripting (XSS) flaw in the article comments feature. The application fails to properly sanitize or validate user-supplied input within the link field of a comment, allowing an attacker to inject arbitrary JavaScript using a...