CVE-2020-20919

2023-06-2000:00:00

mitre

www.cve.org

file upload

pluck cms

arbitrary code execution

sensitive information

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file.

References

github.com/pluck-cms/pluck/issues/85