← All advisories

Critical severity9.8NVD Advisory· Published Mar 17, 2017· Updated Jun 17, 2026

CVE-2014-8708

CVE-2014-8708

Description

Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Pluck/Pluck2 versions
cpe:2.3:a:pluck-cms:pluck:4.7.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pluck-cms:pluck:4.7.2:*:*:*:*:*:*:*
- (no CPE)range: =4.7.2

Patches

Vulnerability mechanics

References

2

rossmarks.uk/whitepapers/pluck_cms_4.7.txtnvdExploitThird Party Advisory
rossmarks.uk/portfolio.phpnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.