Security Advisory
CVE-2022-27432
8.8
HIGH
Vulnerability Description
A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading to account takeover.
Published Date
March 30, 2022
Official Source
NIST NVD Advisory