2 matches found
CVE-2018-16634
Pluck v4.7.7 allows CSRF via admin.php?action=settings.
CVE-2018-16633
Pluck v4.7.7 allows XSS via the admin.php?action=editpage&page= page title.