VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 10, 2021· Updated Jun 17, 2026

CVE-2021-31745

CVE-2021-31745

Description

Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access to the platform. Because Pluck does not invalidate prior sessions after a password change, access can be sustained even after an administrator performs regular remediation attempts such as resetting their password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Pluck/Pluck2 versions
    cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*
    • (no CPE)range: <=4.7.15
  • Pluck-CMS/Pluckdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.