4 matches found
CVE-2020-18198
Cross Site Request Forgery CSRF in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."...
8.8CVSS0.00932EPSS
SaveExploits1References1
CVE-2020-18198
Cross Site Request Forgery CSRF in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."...
8.8CVSS8.2AI score
SaveExploits0References1
CVE-2020-18198
Pluck CMS 4.7.9 contains a Cross-Site Request Forgery vulnerability in the admin images component (/admin.php?action=images) that allows remote attackers to execute arbitrary code and delete specific images. Root cause: CSRF in the images management workflow. Exploitation status and mitigation st...
8.8CVSS9.1AI score0.00932EPSS
SaveExploits1References1Affected Software1
20