CVE-2020-21564

2020-09-3018:15:24

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files.

CPENameOperatorVersion
pluckeq4.7.5
pluckeq4.7.10-dev4
pluckeq4.7.11-dev2
pluckeq4.7
pluckeq4.7.5-noversion
pluckeq4.7.8-dev3
pluckeq4.7.6
pluckeq4.74
pluckeq4.7.11
pluckeq4.7.8-dev2

Name	Operator	Version
pluck	eq	4.7.5
pluck	eq	4.7.10-dev4
pluck	eq	4.7.11-dev2
pluck	eq	4.7
pluck	eq	4.7.5-noversion
pluck	eq	4.7.8-dev3
pluck	eq	4.7.6
pluck	eq	4.74
pluck	eq	4.7.11
pluck	eq	4.7.8-dev2