CVE-2020-24740

2021-05-1816:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.4%

JSON

An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage

CPENameOperatorVersion
pluckeq4.7.9-dev3
pluckeq4.7
pluckeq4.7.9-dev1
pluckeq4.7.10-dev2
pluckeq4.7.8
pluckeq4.7.4
pluckeq4.7.9-dev4
pluckeq4.7.2
pluckeq4.7.5
pluckeq4.743

Name	Operator	Version
pluck	eq	4.7.9-dev3
pluck	eq	4.7
pluck	eq	4.7.9-dev1
pluck	eq	4.7.10-dev2
pluck	eq	4.7.8
pluck	eq	4.7.4
pluck	eq	4.7.9-dev4
pluck	eq	4.7.2
pluck	eq	4.7.5
pluck	eq	4.743

Rows per page:

1-10 of 251

References

github.com/pluck-cms/pluck/issues/81