Pluck-Cms Pluckcms
2 CVEs affecting Pluck-Cms Pluckcms. Latest disclosed: 2023-06-20. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-20718 | Critical | 9.8 | 2023-06-20 | File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file()… |
CVE-2019-1010062 | Critical | 9.8 | 2019-07-16 | PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/ima… |