Pluck Cross-Site Request Forgery Vulnerability (CNVD-2019-05780)

Pluck is a content management system CMS developed using the PHP language. A cross-site request forgery vulnerability exists in Pluck version 4.7.9-dev1. A remote attacker can exploit this vulnerability by deleting modules with /admin.php?action=moduledelete&var1= URI...

Pluck Cross-Site Request Forgery Vulnerability (CNVD-2019-05779)

Pluck is a content management system CMS developed using the PHP language. A cross-site request forgery vulnerability exists in Pluck version 4.7.9-dev1. A remote attacker can exploit this vulnerability by deleting a theme with /admin.php?action=themedelete&var1= URI...