plenti vulnerabilities

2 known vulnerabilities in plenti from Plentico. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  plenti: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-49381Oct 25, 2024Plentico

  Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information lo

• 7.5 High severity

  plenti: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2024-49380Oct 25, 2024PlenticoEPSS 2.71%

  Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code