CVE-2021-47783: Phpwcms 1.9.30 - Arbitrary File Upload
Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-site scripting attacks on the platform.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47783?
CVE-2021-47783 is considered a critical vulnerability due to its potential for arbitrary file uploads and the execution of malicious JavaScript.
How do I fix CVE-2021-47783?
To fix CVE-2021-47783, update Phpwcms to the latest version that addresses this vulnerability and review your file upload validation process.
What systems are affected by CVE-2021-47783?
CVE-2021-47783 affects Phpwcms version 1.9.30 specifically.
What type of attacks can be executed using CVE-2021-47783?
CVE-2021-47783 allows authenticated attackers to upload malicious SVG files which can potentially lead to cross-site scripting (XSS) attacks.
Who can exploit CVE-2021-47783?
Authenticated users with access to the file upload feature in Phpwcms can exploit CVE-2021-47783.