Security Advisory
CVE-2023-36236
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Cross Site Scripting vulnerability in webkil Bagisto v.1.5.0 and before allows an attacker to execute arbitrary code via a crafted SVG file uplad.