CVE-2020-20969

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• PluckCMS 4.7.10 - Unrestricted File Upload2025-12-03 · webapps · php

Impact

File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-20969.md
• https://github.com/pluck-cms/pluck/issues/86
• https://github.com/pluck-cms/pluck/issues/86