A vulnerability classified as critical was found in PluXml CMS 5.8.21/5.9.0-rc7. Impacted is an unknown function of the component Session Identifier Handler. Executing a manipulation can lead to session fixiation.
This vulnerability is handled as CVE-2026-24352. The attack can be executed remotely. There is not any exploit available.
