pluck-cms

Records48All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

pluck-cms records in CISA KEV

No pluck-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pluck 43 records HIGH Pluckcms 2 records HIGH

Records

2 records in Pluckcms · all components

TI-2020-13919 CVE-2020-20718 · GHSA-6gc9-w97g-whgj

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to…

HIGH 82

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01314 Published 2023-06-20 No fix listed CWE-434

TI-2019-15967 CVE-2019-1010062 · GHSA-xgfr-gr68-98j5

Unrestricted file upload in pluck-cms PluckCMS

MEDIUM 46

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01808 Published 2019-07-16 No fix listed CWE-434

Open these records in search →

Critical	10
High	18
Medium	20
Low	0
No CVSS	0