Statamic CMS vulnerable to remote code execution via form uploads

Impact Similar to another advisory, certain additional PHP files crafted to look like images may be uploaded regardless of mime type validation rules. This affects front-end forms using the "Forms" feature, and asset upload fields in the control panel. Patches It has been patched in 3.4.14 and...

PT-2023-30735

Name of the Vulnerable Software and Affected Versions Statamic versions prior to 3.4.14 Statamic versions prior to 4.34.0 Description The issue allows malicious users to upload and execute code by uploading PHP files crafted to look like images, bypassing mime type validation rules. This affects...