Medium severity6.1OSV Advisory· Published Feb 18, 2018· Updated Jun 17, 2026
CVE-2018-7197
CVE-2018-7197
Description
An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- github.com/pluck-cms/pluck/issues/47nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.