← back
CVE-2020-20969highCWE-434

CVE-2020-20969

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.2epss 6.2%
from disclosure to weapon897 days
Published on NVDJun 20
1st PoC+897d
exploitation probability
6.2%top 7% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_restoreitem.php file.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.