Lucene search

China National Vulnerability DatabaseCNVD-2023-93332

HistorySep 20, 2023 - 12:00 a.m.

Pluck CMS Cross-Site Scripting Vulnerability

2023-09-2000:00:00

China National Vulnerability Database

www.cnvd.org.cn

pluck cms

cross-site scripting

vulnerability

php

version 4.7.18

install.php

installation handler

exploit

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

JSON

Pluck is a content management system (CMS) developed using the PHP language. A cross-site scripting vulnerability exists in Pluck CMS version 4.7.18, which stems from unknown code in install.php in the component Installation Handler, resulting in cross-site scripting. An attacker can exploit this vulnerability to cause cross-site scripting.

CPENameOperatorVersion
pluck pluck cmseq4.7.18

CPE	Name	Operator	Version
	pluck pluck cms	eq	4.7.18