Cross site request forgery (csrf)

2021-05-1722:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.6%

JSON

Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."

CPENameOperatorVersion
pluckeq4.7.9

CPE	Name	Operator	Version
	pluck	eq	4.7.9

References

github.com/pluck-cms/pluck/issues/69