Pluck CMS <= 4.7.21 Stored XSS in albums Module Analysis

github.com 2026-07-19查看中文 →

Security AdvisoryHighPluck CMS

Affected:

Pluck CMS <= 4.7.21 dev

Referenced CVEs: CVE-2026-16205 · 2.4

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

DroidClaw Pre-Auth Command Execution via Unsigned Scheduled Callback (CWE-639) 2026-07-28 facil.io MIME Parser Infinite Loop DoS Vulnerability (CVE-835) and Fix 2026-07-28 facil.io chunked encoding negative size causes memory corruption 2026-07-28 facil.io MIME Parser OOB Read Crash (CVE-191/125) and POC 2026-07-28 SiYuan Note SVG Sanitization Bypass leading to Reflected/Stored XSS 2026-07-28

Offline Archive

Offline screenshot & PDF are Pro-exclusive