medium5.4
CVE-2023-49444
An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avata…
Impact
An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Html-Js | Doracms | Version 2.1.8 |