Description
An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed filetypes for uploads in missing some applicable ones such as .phtml and .htaccess.
Unscored
CVE-2018-11331
EUVD-2018-3368GHSA-8v5g-x5hv-26fq
An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed filetypes for uploads in…
Published May 21, 2018 · Updated Sep 16, 2024 · Assigned by mitre