9.8
CVSS
CVE-2022-27952
RCE
An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.
Severity: CRITICAL