CVE-2022-27952

Publication date

2022-04-12 16:29:04

Family

mitre

State

PUBLISHED

Description

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.