CVE-2022-26965
In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.
Références
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web youtu.be