Description
An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute arbitrary code via uploading a crafted file.
Medium · 5.4
CVE-2026-36722
EUVD-2026-35924GHSA-j4g2-pj6c-fhp6
An authenticated arbitrary file upload vulnerability in the /api/create-car-image component of bookcars v8.3 allows attackers to execute ar…
Published Jun 9, 2026 · Updated Jun 10, 2026 · Assigned by mitre