PT-2021-10154

Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.9 Description: The issue allows remote attackers to execute arbitrary code and delete a specific article via the component "/admin.php?action=page". This is a Cross Site Request Forgery CSRF issue. Recommendations: For...

CVE-2020-18195: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component " /admin.php?action=page."...