Skip to content
OpenAdvisories

Vendor

Pluck

3 known vulnerabilities.

Products

CMS 2 pluck-cms 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-16205

    Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting

    A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead t…

    Pluck CMS
  • Low 2.6
    CVE-2023-5013

    Pluck CMS Installation install.php cross site scripting

    A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of the file install.php of the component Installation Handler. The manipulation of the argument contents with the input <script>alert('xs…

    Pluck CMS