PluckCMS Pluck 4.7.18
Approved changes feed: RSS · Atom
cpe:2.3:a:pluck-cms:pluck:4.7.18:-:*:*:*:*:*:*part: a version: 4.7.18 update: -
| Vendor | Pluck Cms (79818d9e-3bb6-5d0c-b0a3-8aaffb20024d) |
|---|---|
| Product | Pluck (4e081014-454c-55c8-a654-77e6221e09f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pluck-cms/pluck |
purl2cpe | 2026-06-01 10:15:56.527465 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-43042 |
vulnerable | 2026-06-08 06:45:47.251969 |
Details available
Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.
Published: 2024-08-16T00:00:00.000Z
Updated: 2025-03-19T20:12:55.179Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5013 |
vulnerable | 2026-06-08 06:19:40.687934 |
Pluck CMS Installation install.php cross site scripting
LOW (2.6)
A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of the file install.php of the component Installation Handler. The manipulation of the argument contents with the input <script>alert('xss')</script> leads to cross site scripting. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-239854 is the identifier assigned to this vulnerability.
Published: 2023-09-16T23:00:07.544Z
Updated: 2024-08-02T07:44:53.857Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50564 |
vulnerable | 2026-06-08 06:16:16.251375 |
Details available
An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file.
Published: 2023-12-14T00:00:00.000Z
Updated: 2024-10-08T14:22:58.932Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.