PT-2018-13706

Name of the Vulnerable Software and Affected Versions Pluck version 4.7.7 Description The issue allows for XSS Cross-Site Scripting attacks via an SVG file containing Javascript in a SCRIPT element. This file can be uploaded through the 'pages-manage' section under the 'admin.php?action=files'...