CVE-2023-39115: Unrestricted Upload of File with Dangerous Type

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...

PT-2023-26790

Name of the Vulnerable Software and Affected Versions Campcodes Online Matrimonial Website System Script version 3.3 Description The issue allows for XSS via a crafted SVG document. This is possible through the "install/aiz-uploader/upload" endpoint. Recommendations For version 3.3, consider...