CVE-2026-31205

Published May 4th, 2026

View on NVD ↗

CVSS v3

5.7

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent function

pluck-cms/pluck

Central repo for pluck cms

GitHub