Security Advisory
CVE-2018-11331
9.8
CRITICAL
Vulnerability Description
An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed filetypes for uploads in missing some applicable ones such as .phtml and .htaccess.
Published Date
May 21, 2018
Official Source
NIST NVD Advisory