CVE-2022-27260

Published April 12th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.

ButterCMS/buttercms-js

Node/JS API client for ButterCMS (https://buttercms.com)

GitHub

163