CVE-2020-18198

2021-05-1722:15:07

Google

osv.dev

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."

CPENameOperatorVersion
pluckeq4.7.9-dev3
pluckeq4.7
pluckeq4.7.9-dev1
pluckeq4.7.8
pluckeq4.7.4
pluckeq4.7.9-dev4
pluckeq4.7.2
pluckeq4.7.5
pluckeq4.743
pluckeq4.7.7