EIP-2026-111359

This exploit demonstrates a Remote Code Execution (RCE) vulnerability in Pluck CMS v4.7.18 by authenticating as an admin, uploading a malicious ZIP file containing a PHP shell, and then accessing the uploaded shell to execute arbitrary code.