CVE-2020-20918

An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden parameter to admin.php when editing a page...

CVE-2020-20918

The CVE-2020-20918 entry affects Pluck CMS v4.7.10-dev2, where a vulnerability in the hidden parameter of admin.php during page editing allows a remote attacker to execute arbitrary PHP code. The risk is described as remote, no user interaction, with high impact to confidentiality, integrity, and...