Tag

Pluck-Cms

1 brief RSS

Arbitrary File Upload and RCE in Pluck CMS via CVE-2023-50564

An authenticated arbitrary file upload vulnerability in Pluck CMS v4.7.18 allows remote attackers to achieve code execution by uploading a malicious ZIP archive via the module installation interface.

Pluck web-vulnerability rce file-upload pluck-cms

1r 2t 1c 2d ago