VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 10, 2021· Updated Jun 17, 2026

CVE-2021-31746

CVE-2021-31746

Description

Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Pluck/Pluck2 versions
    cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*
    • (no CPE)range: =4.7.15
  • Pluck/Pluck-CMSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.