Vendor
Phpwcms
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.4
Phpwcms 1.9.30 - Arbitrary File Upload
Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-sit…