CVE-2021-47783

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-47783
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47783.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-47783
Published
2026-01-16T00:16:21.503Z
Modified
2026-07-09T02:49:00.673025Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
[none]
Details

Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-site scripting attacks on the platform.

References

Affected packages

Git / github.com/slackero/phpwcms

Affected ranges

Type
GIT
Repo
https://github.com/slackero/phpwcms
Events
Introduced
aac4ddaa12e534bec717c437931267f641f227d6
Last affected
aac4ddaa12e534bec717c437931267f641f227d6
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:phpwcms:phpwcms:1.9.30:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.9.30"
        },
        {
            "last_affected": "1.9.30"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*
1.9.30
v1.*
v1.9.30

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47783.json"