Vulnerabilities > Buttercms

DATE CVE VULNERABILITY TITLE RISK
2022-04-12 CVE-2022-27260 Unrestricted Upload of File with Dangerous Type vulnerability in Buttercms 1.2.8
An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.
network
low complexity
buttercms CWE-434
critical
9.8