critical9.8
CVE-2022-27952
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.
Impact
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Payloadcms | Payload | Version 0.15.0 |