CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2020-20969

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

CVE-2020-20969

CVE-2020-20969 affects PluckCMS v4.7.10. An arbitrary file upload vulnerability in trashcan_restoreitem.php enables remote code execution (as per multiple sources), with PoCs noting an authenticated-admin requirement in some demonstrations. The vulnerability is consistently described as a file up...