Skip to content
OpenAdvisories

Vendor

Phpwcms

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    Phpwcms 1.9.30 - Arbitrary File Upload

    Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-sit…