CVE-2025-70129 describes a flaw in PluXml versions 5.8.22 and earlier where the anti-spam captcha mechanism can be trivially bypassed. When enabled, the captcha challenge details are exposed within the article's document body, allowing automated scripts to solve it. This vulnerability enables attackers to flood articles with spam comments, particularly if other web defenses are absent. There is no public information regarding active exploitation, exploit code availability, or community discussion for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 5.8.22CPE matchmatch criteria | cpe:2.3:a:pluxml:pluxml:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.