Executive brief
Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
Affected products
- Packagist pagekit/pagekit
Junglewise Threat Intelligence
CVE-2022-38916: Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
CVE-2022-38916 · Severity: low · CVSS 3.1 · Published 2022-09-21
Technologies: pagekit/pagekit (Packagist). Vendors: Packagist.
Related threats
- Pagekit CMS has an Insecure Direct Object Reference (IDOR) in its User Role component
- Pagekit CMS is vulnerable to OS Command Injection via Storage component
- Pagekit Cross-site Scripting vulnerability
- Command injection in pagekit
- Pagekit CMS cross-site scripting in Markdown text box where articles are edited