CVE-2021-31746

CVE-2021-31746 is a critical Zip Slip vulnerability affecting Pluck-CMS Pluck version 4.7.15, allowing attackers to upload malicious zip files. This can lead to directory traversal and potentially arbitrary code execution due to the server extracting files outside the intended directory. With a CVSS score of 9.8 (Critical), it presents a severe risk as it requires no user interaction or privileges and can be exploited over the network, leading to complete compromise of confidentiality, integrity, and availability. While no public exploits (Metasploit, Nuclei, ExploitDB) or active exploitation are currently reported, and community discussion is minimal, the high severity warrants immediate patching.