Plenti vulnerabilities
We track 3 vulnerabilities in Plenti products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 12, 2025.
Latest Plenti vulnerabilities
- 8.8 High severity
Plenti: Improper Control of Generation of Code
Plenti <= 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution.
- 7.5 High severity
plenti: Improper Limitation of a Pathname to a Restricted Directory
Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information lo
- 7.5 High severity
plenti: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code