Unrestricted file upload

2023-06-2015:15:00

PRIOn knowledge base

www.prio-n.com

unrestricted file upload

remote code execution

trashcan restoreitem.php

7.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.6%

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file.

CPENameOperatorVersion
pluckeq4.7.10

CPE	Name	Operator	Version
	pluck	eq	4.7.10

References

github.com/pluck-cms/pluck/issues/86