VYPR
← All advisories
Medium severity5.4OSV Advisory· Published Jan 16, 2026· Updated Jun 17, 2026

CVE-2021-47783

CVE-2021-47783

Description

Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-site scripting attacks on the platform.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Slackero/PhpwcmsOSV
    Range: phpwcms-1.6.529, phpwcms-1.6.531, phpwcms-1.7.0, …
  • Phpwcms/Phpwcms2 versions
    cpe:2.3:a:phpwcms:phpwcms:1.9.30:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phpwcms:phpwcms:1.9.30:*:*:*:*:*:*:*
    • (no CPE)range: =1.9.30

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.