CVE-2023-44767

RiteCMS 3.0 is affected by a file-upload vulnerability that allows uploading SVGs containing XSS content due to insufficient validation. Root cause: lack of effective validation for uploaded files. Impact: local attacker can induce XSS; CNVD/CNNVD entries also describe potential for remote code e...