CSRF Vulnerability in Pluck v4.7.7 via admin.php?action=settings

CVE-2018-16634 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Pluck v4.7.7 allows CSRF via admin.php?action=settings.

Learn more about our Web Application Penetration Testing UK.