未評価
Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attack...
CVE-2021-47783
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-site scripting attacks on the platform.
参照URL
- advisory vulncheck.com
- report exploit-db.com
- web phpwcms.org