← All advisories

Medium severity5.4OSV Advisory· Published Sep 12, 2018· Updated Jun 17, 2026

CVE-2018-16729

CVE-2018-16729

Description

Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Pluck/PluckOSV2 versions
4.7, 4.7.2, 4.7.3, …+ 1 more
- (no CPE)range: 4.7, 4.7.2, 4.7.3, …
- (no CPE)range: =4.7.7

Patches

Vulnerability mechanics

References

1

github.com/pluck-cms/pluck/issues/63nvdExploitIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.