Vulnerabilities > Shopsite

DATE CVE VULNERABILITY TITLE RISK
2024-01-26 CVE-2024-22550 Unrestricted Upload of File with Dangerous Type vulnerability in Shopsite 14.0
An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.
network
low complexity
shopsite CWE-434
6.1