VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 30, 2022· Updated Jun 17, 2026

CVE-2022-27432

CVE-2022-27432

Description

A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading to account takeover.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Pluck/Pluck2 versions
    cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*
    • (no CPE)range: =4.7.15
  • Pluck CMS/Pluck CMSdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.