CVE-2014-8708

Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-03-17

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Pluck (Pluck-cms)

References

• http://rossmarks.uk/portfolio.php
• http://rossmarks.uk/whitepapers/pluck_cms_4.7.txt