PT-2023-26790

Name of the Vulnerable Software and Affected Versions Campcodes Online Matrimonial Website System Script version 3.3 Description The issue allows for XSS via a crafted SVG document. This is possible through the "install/aiz-uploader/upload" endpoint. Recommendations For version 3.3, consider...

CVE-2023-39115

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...

CVE-2023-39115

CVE-2023-39115 affects Campcodes Online Matrimonial Website System Script 3.3. the vulnerability is an arbitrary file upload via a crafted SVG, enabling code execution (SVG contains script and external navigation). Root cause: insufficient validation of uploaded SVG files. Affected component: ins...

CVE-2023-39115: Unrestricted Upload of File with Dangerous Type

install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document...