buttercms vulnerabilities

CVEs whose affected-version data names the buttercms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-27260Critical· 9.8

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.

▾ Midnightbuttercms · buttercmsEPSS 3.1%via NVD

buttercms vulnerabilities (CVEs) · VulnSea