| Package | Affected versions | Patched versions |
|---|---|---|
| pluck | = 4.7.9 |
Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free