CVE-2014-8707

Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option.

Date published : 2017-03-17

http://rossmarks.uk/portfolio.php

http://rossmarks.uk/whitepapers/pluck_cms_4.7.txt