← العودة للجدول
CVE-2026-16205
CVE-2026-16205 — A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability aff
📅 2026-07-19
🟢 Low 🔥 No NVD Exploit Web CVSS 2.4

📋 الوصف الكامل

A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decode of the file data/modules/albums/albums.admin.php of the component Albums Module. Executing a manipulation of the argument Info can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for

💻 الأنظمة المتأثرة

PHP

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-16205

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2026-16205 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←