NetSight
medium4.8

CVE-2021-31747

Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in update_applet.php, which could lead to man-in-the-middle attacks.

Impact

Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in update_applet.php, which could lead to man-in-the-middle attacks.

Affected products

VendorProductAffected versions
Pluck-CmsPluck
Version 4.7.15

Weakness classification

References