Plentico vulnerabilities
We track 2 vulnerabilities in Plentico products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 25, 2024.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Plentico vulnerabilities
- 7.5 High severity
plenti: Improper Limitation of a Pathname to a Restricted Directory
Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information lo
- 7.5 High severity
plenti: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code