CVE-2014-8708

Critical

Published: 17/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Pluck CMS version 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.

Attackers can exploit this vulnerability to gain control over the system, posing a serious threat to the organization's data security.

It is recommended to update Pluck CMS to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.