CVE-2022-27952

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file...

PT-2022-18718

Name of the Vulnerable Software and Affected Versions PayloadCMS version 0.15.0 Description The issue allows attackers to execute arbitrary code via a crafted SVG file, exploiting an arbitrary file upload vulnerability in the file upload module. Recommendations For PayloadCMS version 0.15.0,...

CVE-2022-27952: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file...