CVE-2022-26589

2022-04-1300:15:19

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.

CPENameOperatorVersion
pluckeq4.7.13
pluckeq4.7.11
pluckeq4.7.15
pluckeq4.7.9-dev3
pluckeq4.7.11-dev2
pluckeq4.7
pluckeq4.7.9-dev1
pluckeq4.7.10-dev2
pluckeq4.7.8
pluckeq4.7.4

Name	Operator	Version
pluck	eq	4.7.13
pluck	eq	4.7.11
pluck	eq	4.7.15
pluck	eq	4.7.9-dev3
pluck	eq	4.7.11-dev2
pluck	eq	4.7
pluck	eq	4.7.9-dev1
pluck	eq	4.7.10-dev2
pluck	eq	4.7.8
pluck	eq	4.7.4

Rows per page:

1-10 of 381

References

medium.com/%40devansh3008/pluck-cms-v4-7-15-csrf-vulnerability-at-delete-page-9fff0309f9c

owasp.org/www-community/attacks/csrf