Vulnerability Database

322,905

Total vulnerabilities in the database

CVE-2021-47783

Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-site scripting attacks on the platform.

  • Published: Jan 16, 2026
  • Updated: Feb 10, 2026
  • CVE: CVE-2021-47783
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

Software From Fixed in
phpwcms / phpwcms 1.9.30 1.9.30.x