Sixsixisix

**Name of the Vulnerable Software and Affected Versions** PluckCMS version 4.7.10 **Description** The issue allows a remote attacker to execute arbitrary code via a crafted image file to the `save file()` parameter. This enables the attacker to potentially gain control over the system. **Recommendations** For PluckCMS version 4.7.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.