A vulnerability, which was classified as problematic, has been found in PluXml CMS 5.8.21/5.9.0-rc7. The affected element is an unknown function of the component SVG File Parser. The manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2026-24350. The attack is possible to be carried out remotely. No exploit exists.