Description
An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG document that contains an XSS payload.
Unscored
CVE-2021-42051
EUVD-2021-29039GHSA-jf6w-775m-7xx9
An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG documen…
Published Dec 14, 2021 · Updated Aug 4, 2024 · Assigned by mitre