# Unrestricted file upload.

Uploads of dangerous file types, often leading to code execution. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch](https://agentprime.io/advisories/CVE-2026-18438.md)
  `CVE-2026-18438` · CVE record: wpdevteam Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! · CVSS 8.8 High · Not analysed yet · Published 15 Aug 2026 · Tags: Unrestricted file upload
- [MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Upload via 'resumableFilename' Parameter](https://agentprime.io/advisories/CVE-2026-15965.md)
  `CVE-2026-15965` · CVE record: sadathimel MaxUpload – Big File Uploads – Increase Maximum File Upload Size · CVSS 8.8 High · Not analysed yet · Published 15 Aug 2026 · Tags: Unrestricted file upload
- [SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload](https://agentprime.io/advisories/CVE-2026-19839.md)
  `CVE-2026-19839` · CVE record: SourceCodester Simple Doctors Appointment System · CVSS 5.1 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Unrestricted file upload in Dell Wyse Management Suite (WMS)](https://agentprime.io/advisories/CVE-2026-66271.md)
  `CVE-2026-66271` · CVE record: Dell Wyse Management Suite (WMS) · CVSS 7.2 High · Not analysed yet · Published 14 Aug 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in Dell Wyse Management Suite (WMS)](https://agentprime.io/advisories/CVE-2026-66270.md)
  `CVE-2026-66270` · CVE record: Dell Wyse Management Suite (WMS) · CVSS 7.2 High · Not analysed yet · Published 14 Aug 2026 · Tags: Unrestricted file upload
- [WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)](https://agentprime.io/advisories/CVE-2026-49827.md)
  `CVE-2026-49827` · CVE record: SMEWebify WebErpMesv2 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Authentication bypass, Unrestricted file upload, CWE-20
- [WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.](https://agentprime.io/advisories/CVE-2026-65939.md)
  `CVE-2026-65939` · CVE record: Progress Software Corporation WhatsUp Gold · CVSS 6.8 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal, Unrestricted file upload
- [WooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection](https://agentprime.io/advisories/CVE-2026-18391.md)
  `CVE-2026-18391` · CVE record: Unknown WooCommerce Subscriptions · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Unrestricted file upload
- [Gift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-15039.md)
  `CVE-2026-15039` · CVE record: Unknown giftware · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Unrestricted file upload
- [Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component](https://agentprime.io/advisories/CVE-2026-55676.md)
  `CVE-2026-55676` · CVE record: cisagov Malcolm · CVSS 8.7 High · Not analysed yet · Published 11 Aug 2026 · Tags: Unrestricted file upload
- [InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure](https://agentprime.io/advisories/CVE-2026-13457.md)
  `CVE-2026-13457` · CVE record: instawp InstaWP Connect – 1-click WP Staging & Migration · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Unrestricted file upload
- [Cockpit CMS Cockpit CMS - Unrestricted File Upload](https://agentprime.io/advisories/CVE-2026-72557.md)
  `CVE-2026-72557` · CVE record: Cockpit CMS Cockpit CMS · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Unrestricted file upload
- [Wildfly-core: wildfly: arbitrary file read via malicious archive deployment](https://agentprime.io/advisories/CVE-2026-24330.md)
  `CVE-2026-24330` · CVE record: Red Hat Red Hat Fuse 7 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Unrestricted file upload
- [dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload](https://agentprime.io/advisories/CVE-2026-72592.md)
  `CVE-2026-72592` · CVE record: dulldusk phpfm · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Unrestricted file upload
- [Product Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-19089.md)
  `CVE-2026-19089` · CVE record: Unknown Product Input Fields for WooCommerce · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Unrestricted file upload
- [Squeeze < 1.7.12 - Author+ Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-16985.md)
  `CVE-2026-16985` · CVE record: Unknown Squeeze · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Unrestricted file upload
- [saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload](https://agentprime.io/advisories/CVE-2026-19383.md)
  `CVE-2026-19383` · CVE record: saithink SaiAdmin and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [CodeIgniter: Uploaded file extension validation bypass in \`is_image\` and \`mime_in\` rules](https://agentprime.io/advisories/GHSA-mmj4-63m4-r6h5.md)
  `GHSA-mmj4-63m4-r6h5`, `CVE-2026-63223`, `PKSA-kcm9-w3rf-jxsk` · Packagist `codeigniter4/framework`: affected `<4.7.4`, fixed in `4.7.4` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Aug 2026 · Tags: Unrestricted file upload
- [SourceCodester Photo Share Website ajax.php save_upload unrestricted upload](https://agentprime.io/advisories/CVE-2026-19210.md)
  `CVE-2026-19210` · CVE record: SourceCodester Photo Share Website · CVSS 5.3 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp](https://agentprime.io/advisories/CVE-2022-4995.md)
  `CVE-2022-4995` · CVE record: Weaver Network Co., Ltd. E-cology 9.0 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Aug 2026 · Tags: Unrestricted file upload
- [Statamic: Missing file upload validation on frontend forms allows uploading disallowed file types](https://agentprime.io/advisories/GHSA-qhr7-v3xp-vw9m.md)
  `GHSA-qhr7-v3xp-vw9m`, `CVE-2026-71434`, `PKSA-htv4-42tq-8d9c` · Packagist `statamic/cms`: affected `<5.74.3 || >=6.0.0, <6.24.2`, fixed in `5.74.3`, `6.24.2` · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Unrestricted file upload
- [Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token](https://agentprime.io/advisories/CVE-2026-70558.md)
  `CVE-2026-70558` · CVE record: DataLinkDC Dinky · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Unrestricted file upload
- [SourceCodester Online Examination & Learning Management System upload_files.php unrestricted upload](https://agentprime.io/advisories/CVE-2026-19065.md)
  `CVE-2026-19065` · CVE record: SourceCodester Online Examination & Learning Management System · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-3418.md)
  `CVE-2026-3418` · CVE record: WSO2 WSO2 API Manager and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-66665.md)
  `CVE-2026-66665` · CVE record: Brandexponents Type Hub · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Unrestricted file upload
- [ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module.](https://agentprime.io/advisories/CVE-2026-67688.md)
  `CVE-2026-67688` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Unrestricted file upload
- [Rongzhitong Visual Integrated Command and Dispatch Platform upload unrestricted upload](https://agentprime.io/advisories/CVE-2026-18969.md)
  `CVE-2026-18969` · CVE record: Rongzhitong Visual Integrated Command and Dispatch Platform · CVSS 6.9 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [imranrisal-dev Student-Management-System Shared Upload Helper student_profile_pic.php storeProfileImage unrestricted upload](https://agentprime.io/advisories/CVE-2026-18927.md)
  `CVE-2026-18927` · CVE record: imranrisal-dev Student-Management-System · CVSS 5.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Validation and Path Traversal](https://agentprime.io/advisories/CVE-2026-18933.md)
  `CVE-2026-18933` · CVE record: wp-downloadmanager wp-downloadmanager · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Unrestricted file upload
- [Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist](https://agentprime.io/advisories/CVE-2026-54416.md)
  `CVE-2026-54416` · CVE record: pluck-cms Pluck CMS · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Unrestricted file upload
- [LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-6147.md)
  `CVE-2026-6147` · CVE record: lightsyncpro LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Unrestricted file upload
- [Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-14553.md)
  `CVE-2026-14553` · CVE record: Unknown zportals · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Unrestricted file upload
- [Ghost: File Upload Content-Type Spoofing](https://agentprime.io/advisories/GHSA-944x-pm95-3jpr.md)
  `GHSA-944x-pm95-3jpr`, `BIT-ghost-2026-53948`, `CVE-2026-53948` · npm `ghost`: affected `>=6.19.4, <6.21.1`, fixed in `6.21.1` · CVSS 5.4 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Unrestricted file upload
- [CVAT has stored XSS via annotation guide assets](https://agentprime.io/advisories/CVE-2026-65986.md)
  `CVE-2026-65986` · CVE record: cvat-ai cvat · CVSS 8.5 High · Not analysed yet · Published 4 Aug 2026 · Tags: Cross-site scripting (XSS), Unrestricted file upload
- [Trippo ResponsiveFilemanager dialog.php unrestricted upload](https://agentprime.io/advisories/CVE-2026-18788.md)
  `CVE-2026-18788` · CVE record: Trippo ResponsiveFilemanager · CVSS 6.9 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources](https://agentprime.io/advisories/CVE-2026-14175.md)
  `CVE-2026-14175` · CVE record: Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in refirio freo2](https://agentprime.io/advisories/CVE-2026-67243.md)
  `CVE-2026-67243` · CVE record: refirio freo2 · CVSS 8.6 High · Not analysed yet · Published 4 Aug 2026 · Tags: Unrestricted file upload
- [Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint](https://agentprime.io/advisories/CVE-2026-16548.md)
  `CVE-2026-16548` · CVE record: Unknown Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat · CVSS 6.5 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Unrestricted file upload
- [ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-16618.md)
  `CVE-2026-16618` · CVE record: Unknown Improve SEO · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Unrestricted file upload
- [WebsiteBaker CMS < 2.13.10 File Upload RCE via Module Installation](https://agentprime.io/advisories/CVE-2026-61524.md)
  `CVE-2026-61524` · CVE record: WebsiteBaker Org e.V. WebsiteBaker CMS · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Unrestricted file upload
- [OpenEMR Authenticated SQL Injection via backup.php Import Feature](https://agentprime.io/advisories/CVE-2026-39931.md)
  `CVE-2026-39931` · CVE record: openemr openemr · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Unrestricted file upload
- [Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-16250.md)
  `CVE-2026-16250` · CVE record: Unknown Personal QR Message · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Unrestricted file upload
- [Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-16060.md)
  `CVE-2026-16060` · CVE record: Unknown Insert or Embed Articulate Content into WordPress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Unrestricted file upload
- [Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-12872.md)
  `CVE-2026-12872` · CVE record: Unknown Webinfos · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Unrestricted file upload
- [Theme Demo Import <= 1.1.3 - Admin+ Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-13157.md)
  `CVE-2026-13157` · CVE record: Unknown Theme Demo Import · CVSS 7.2 High · Not analysed yet · Published 1 Aug 2026 · Tags: Unrestricted file upload
- [Everest Toolkit <= 1.2.3 - Admin+ Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-13158.md)
  `CVE-2026-13158` · CVE record: Unknown Everest Toolkit · CVSS 7.2 High · Not analysed yet · Published 1 Aug 2026 · Tags: Unrestricted file upload
- [Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers](https://agentprime.io/advisories/GHSA-98pp-vccm-qm25.md)
  `GHSA-98pp-vccm-qm25`, `CVE-2026-53599`, `PKSA-h751-bdn3-ptsn` · Packagist `redaxo/source`: affected `>=5.18.2, <5.21.1`, fixed in `5.21.1` · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2026 · Tags: Unrestricted file upload
- [FMS Employee Allows Upload of Unrestricted Files](https://agentprime.io/advisories/CVE-2026-21662.md)
  `CVE-2026-21662` · CVE record: Johnson Controls FM Systems Employee · CVSS 4.8 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Unrestricted file upload
- [Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-16236.md)
  `CVE-2026-16236` · CVE record: realtyna Realtyna Organic IDX plugin + WPL Real Estate · CVSS 8.8 High · Not analysed yet · Published 31 Jul 2026 · Tags: Unrestricted file upload
- [Realtyna Organic IDX plugin + WPL Real Estate <= 5.2.0 - Unauthenticated Arbitrary File Upload via 'files\[file\]' Parameter via Public I/O 'set_property' Command](https://agentprime.io/advisories/CVE-2026-14483.md)
  `CVE-2026-14483` · CVE record: realtyna Realtyna Organic IDX plugin + WPL Real Estate · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Unrestricted file upload
- [Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload](https://agentprime.io/advisories/CVE-2026-67206.md)
  `CVE-2026-67206` · CVE record: wolfcms wolfcms · CVSS 8.7 High · Not analysed yet · Published 30 Jul 2026 · Tags: Unrestricted file upload
- [JupiCore does not perform validation of firmware](https://agentprime.io/advisories/CVE-2026-44103.md)
  `CVE-2026-44103` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Unrestricted file upload
- [File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-44097.md)
  `CVE-2026-44097` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Unrestricted file upload
- [Admin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup\[input\] Repeater Row Key](https://agentprime.io/advisories/CVE-2026-16610.md)
  `CVE-2026-16610` · CVE record: ASE Admin and Site Enhancements (ASE) Pro · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Unrestricted file upload
- [Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2](https://agentprime.io/advisories/CVE-2026-65885.md)
  `CVE-2026-65885` · CVE record: balbooa.com Gridbox extension for Joomla · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Unrestricted file upload
- [Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings](https://agentprime.io/advisories/CVE-2026-14270.md)
  `CVE-2026-14270` · CVE record: ThemeComplete Extra Checkout Options - addon for Extra Product Options plugin · CVSS 8.8 High · Not analysed yet · Published 29 Jul 2026 · Tags: Unrestricted file upload
- [Unrestricted image upload vulnerability](https://agentprime.io/advisories/CVE-2026-63228.md)
  `CVE-2026-63228` · CVE record: Three Learning Koollab LMS · CVSS 2.6 Low · Not analysed yet · Published 29 Jul 2026 · Tags: Unrestricted file upload
- [Unrestricted SCORM file upload vulnerability](https://agentprime.io/advisories/CVE-2026-63227.md)
  `CVE-2026-63227` · CVE record: An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server. Koollab LMS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Unrestricted file upload
- [Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter](https://agentprime.io/advisories/CVE-2026-12476.md)
  `CVE-2026-12476` · CVE record: smub Easy Digital Downloads – eCommerce Payments and Subscriptions made easy · CVSS 7.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Unrestricted file upload
- [Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-13714.md)
  `CVE-2026-13714` · CVE record: Unknown Realtyna Organic IDX plugin + WPL Real Estate · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: Unrestricted file upload

Newest: <https://agentprime.io/advisories/tag/file-upload.md>
Older: <https://agentprime.io/advisories/tag/file-upload.md?cursor=WyIyMDI2LTA3LTI3VDA2OjAwOjAzLjkyNzAwMFoiLCJDVkUtMjAyNi0xMzcxNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=file-upload&cursor=WyIyMDI2LTA4LTE1VDIxOjU2OjQ0LjU2MjAwMFoiLCJDVkUtMjAyNi03NDc2NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/file-upload/?cursor=WyIyMDI2LTA4LTE1VDIxOjU2OjQ0LjU2MjAwMFoiLCJDVkUtMjAyNi03NDc2NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.