Pluck CMS version 4.7.18 suffers from a persistent cross site scripting vulnerability. Continue reading...