Skip to content
OpenAdvisories

Package · Go

github.com/plentico/plenti

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2025-26260

    Plenti - Code Injection - Denial of Services

    Plenti <= 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution.

    github.com/plentico/plenti Go
  • High 7.7
    CVE-2024-49381

    Plenti arbitrary file deletion vulnerability

    Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information l…

    plentico plenti github.com/plentico/plenti Go
  • High 8.9
    CVE-2024-49380

    Plenti arbitrary file write vulnerability

    Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code…

    plentico plenti github.com/plentico/plenti Go