PT-2021-10155

Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.9 Description: The issue allows remote attackers to execute arbitrary code and delete specific images via the component "/admin.php?action=images". This is a Cross Site Request Forgery CSRF issue. Recommendations: For...

CVE-2020-18198: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."...