CVE-2018-11331
An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed filetypes for uploads in missing some applicable ones such as …
Published: 2018-05-21 · CVSS: Unscored
An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed filetypes for uploads in missing some applicable ones such as .phtml and .htaccess.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7