| |
Vulnerability CVE-2023-49444
Published: 2023-12-08 Modified: 2023-12-14
| Description: |
An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
