A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.

Published Apr 12, 2022 · Updated Aug 3, 2024 · Assigned by mitre