A vulnerability, which was classified as problematic, was found in PluXml CMS 5.8.21/5.9.0-rc7. The impacted element is an unknown function of the component Static Page. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-24351. The attack may be performed from remote. There is no available exploit.