Skip to content
Threat Feed
Subscribe

Vendor

Pluck CMS

1 brief RSS
high advisory

Arbitrary File Upload and RCE in Pluck CMS via CVE-2023-50564

An authenticated arbitrary file upload vulnerability in Pluck CMS v4.7.18 allows remote attackers to achieve code execution by uploading a malicious ZIP archive via the module installation interface.

Pluck web-vulnerability rce file-upload pluck-cms
1r 2t 1c