Unrestricted file upload

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcanrestoreitem.php file...

PT-2023-11570 · Pluck Cms · Pluck Cms

Name of the Vulnerable Software and Affected Versions: PluckCMS version 4.7.10 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the "trashcan restoreitem.php" file. Recommendations: For PluckCMS version 4.7.10, at the moment, there is no information...