CVE-2022-27260

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2022-27260

CVE-2022-27260 concerns ButterCMS v1.2.8 where an arbitrary file upload vulnerability in the file upload component allows code execution via a crafted SVG file. The incident is documented across multiple sources (NVD, Red Hat, GHSA, OSV, CVE lists) with consistent description of an SVG-based uplo...