Security Advisory

CVE-2026-31205

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-04 00:00:00
Last updated 2026-05-04 14:24:01
Assigner mitre
CVSS score 5.7
State PUBLISHED

Description

Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent function