4 matches found
CVE-2023-39115
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...
Cross site scripting
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...
CVE-2023-39115: Unrestricted Upload of File with Dangerous Type
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...
PT-2023-26790
Name of the Vulnerable Software and Affected Versions Campcodes Online Matrimonial Website System Script version 3.3 Description The issue allows for XSS via a crafted SVG document. This is possible through the "install/aiz-uploader/upload" endpoint. Recommendations For version 3.3, consider...