| Package | Affected versions | Patched versions |
|---|---|---|
| pluck | = 4.7.15 |
Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access to the platform. Because Pluck does not invalidate prior sessions after a password change, access can be sustained even after an administrator performs regular remediation attempts such as resetting their password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free