Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.

Published Mar 17, 2017 · Updated Aug 6, 2024 · Assigned by mitre