Security Advisory

CVE-2021-31746

9.8
CRITICAL

Vulnerability Description

Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arbitrary code execution.
Published Date December 10, 2021
Official Source NIST NVD Advisory