CVE-2024-22550: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file...

ShopSite Security Breach

ShopSite is an online store from ShopSite Inc. A security vulnerability exists in ShopSite v14.0, which stems from an arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi that allows an attacker to execute arbitrary code by uploading a specially crafted SVG file...