Approved changes feed: RSS · Atom
cpe:2.3:a:pluck:cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pluck (23427c6f-cf9f-5846-8ba4-d6c64a040a15) |
|---|---|
| Product | Cms (a6180905-156b-51e4-8a4b-ac0ad9903849) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16205 |
vulnerable | 2026-07-29 00:26:18.568389 |
Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting
LOW (2.4)
A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-07-19T02:00:09.299Z
Updated: 2026-07-20T19:10:11.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5013 |
vulnerable | 2026-06-08 06:19:40.687021 |
Pluck CMS Installation install.php cross site scripting
LOW (2.6)
A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of the file install.php of the component Installation Handler. The manipulation of the argument contents with the input <script>alert('xss')</script> leads to cross site scripting. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-239854 is the identifier assigned to this vulnerability.
Published: 2023-09-16T23:00:07.544Z
Updated: 2024-08-02T07:44:53.857Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.