PT-2026-36805

Name of the Vulnerable Software and Affected Versions Pluck CMS versions prior to 4.7.21dev Description A Cross Site Scripting issue allows a remote attacker to escalate privileges. This occurs through the 'editpage.php' endpoint and the sanitizePageContent function. Recommendations Update to...

CVE-2026-31205: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent function...