Design/Logic Flaw

2017-03-1714:59:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%

Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.

CPENameOperatorVersion
pluckeq4.7.2

CPE	Name	Operator	Version
	pluck	eq	4.7.2

References

rossmarks.uk/portfolio.php

rossmarks.uk/whitepapers/pluck_cms_4.7.txt