Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-20718 EUVD-2020-13499GHSA-6gc9-w97g-whgj

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to …

Published Jun 20, 2023 · Updated Dec 10, 2024 · Assigned by mitre

Description

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.

References