← Database

CVE-2026-31205

MEDIUM CVSS: 5.7 Published: 2026-05-04 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent function

Affected Platforms

Unknown

Weakness Type

CWE-79

References