VYPR
← All advisories
High severity7.2NVD Advisory· Published Jun 22, 2023· Updated Jun 17, 2026

CVE-2023-27083

CVE-2023-27083

Description

An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via manage file functionality.

Affected products

9
  • Pluck CMS/Pluck CMSdescription
  • Pluck/Pluck8 versions
    cpe:2.3:a:pluck-cms:pluck:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:pluck-cms:pluck:*:*:*:*:*:*:*:*range: >=4.7.15,<4.7.16
    • cpe:2.3:a:pluck-cms:pluck:4.7.16:-:*:*:*:*:*:*
    • cpe:2.3:a:pluck-cms:pluck:4.7.16:dev1:*:*:*:*:*:*
    • cpe:2.3:a:pluck-cms:pluck:4.7.16:dev2:*:*:*:*:*:*
    • cpe:2.3:a:pluck-cms:pluck:4.7.16:dev3:*:*:*:*:*:*
    • cpe:2.3:a:pluck-cms:pluck:4.7.16:dev4:*:*:*:*:*:*
    • cpe:2.3:a:pluck-cms:pluck:4.7.16:dev5:*:*:*:*:*:*
    • (no CPE)range: 4.7.15 - 4.7.16-dev5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.