high8.8
CVE-2023-50564
An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading …
Impact
An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pluck-Cms | Pluck | Version 4.7.18 |