Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent function
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨*CVE* CVE-2026-31205 Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent fu… https://www.cve.org/CVERecord?id=CVE-2026-31205 ----- Traducción: CVE-2026-31205 Vul… http://infoflow.cloud`
Post summary
The post announces a newly disclosed XSS vulnerability in Pluck CMS that can lead to privilege escalation.
CVE-2026-31205 Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent fu… https://www.cve.org/CVERecord?id=CVE-2026-31205
Post summary
The text announces a CVE‑2026‑31205 XSS flaw in Pluck CMS that can lead to privilege escalation, providing details of the vulnerable code paths.
CVE-2026-31205 Cross Site Scripting Vulnerability in Pluck CMS Before 4.7.21dev Privilege Escalation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31205
Post summary
The post announces CVE-2026-31205 as a cross‑site scripting flaw that allows privilege escalation in Pluck CMS versions prior to 4.7.21dev, with no PoC, exploit, or patch information included.