writeups.xyz / A deep-dive on Pluck CMS vulnerability CVE-2023-25828

Submitter : c2a

Date: 8 May 2023

Bounty : undisclosed

Vulnerabilities :

• Unrestricted File Upload
• RCE
• Security Code Review

Programs :

• Pluck CMS

Authors :

• Matthew Hogg

Link :
https://www.synopsys.com/blogs/software-security/a-deep-dive-on-pluck-cms-vulnerability-cve-2023-25828/