Unrated severityNVD Advisory· Published Dec 16, 2020· Updated Apr 16, 2025

CVE-2020-29607

Description

A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality, which may result in remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pluck CMS/Pluck CMSdescription
Pluck/Pluckllm-fuzzy
Range: <4.7.13

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/162785/Pluck-CMS-4.7.13-Remote-Shell-Upload.htmlmitre
github.com/Hacker5preme/Exploits/tree/main/CVE-2020-29607-Exploitmitre
github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-29607.mdmitre
github.com/pluck-cms/pluck/issues/96mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.027
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000