| Package | Affected versions | Patched versions |
|---|---|---|
| pluck | = 4.7.7 |
Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free