# Unrestricted file upload.

Uploads of dangerous file types, often leading to code execution. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field](https://agentprime.io/advisories/CVE-2026-14494.md)
  `CVE-2026-14494` · CVE record: bdthemes SigmaForms Pro – AI Generated Forms · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: Unrestricted file upload
- [Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal](https://agentprime.io/advisories/CVE-2026-79706.md)
  `CVE-2026-79706` · CVE record: Unknown Breeze Cache · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Unrestricted file upload
- [One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter](https://agentprime.io/advisories/CVE-2026-18983.md)
  `CVE-2026-18983` · CVE record: onedesigns One User Avatar | User Profile Picture · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Unrestricted file upload
- [Unrestricted upload of file with dangerous type in Prospero Flow CRM product photo allows stored cross-site scripting](https://agentprime.io/advisories/CVE-2026-81931.md)
  `CVE-2026-81931` · CVE record: Roskus Prospero Flow CRM · CVSS 4.8 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-78274.md)
  `CVE-2026-78274` · CVE record: WP Manage Ninja Fluent Boards Pro · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Unrestricted file upload
- [Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment](https://agentprime.io/advisories/CVE-2026-77018.md)
  `CVE-2026-77018` · CVE record: Unknown Workeera · CVSS 8.8 High · Not analysed yet · Published 27 Aug 2026 · Tags: Unrestricted file upload
- [Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1](https://agentprime.io/advisories/CVE-2026-77991.md)
  `CVE-2026-77991` · CVE record: joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Unrestricted file upload
- [ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment](https://agentprime.io/advisories/CVE-2026-18080.md)
  `CVE-2026-18080` · CVE record: wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [Thinking Software Technology｜Efence - Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-80237.md)
  `CVE-2026-80237` · CVE record: Thinking Software Technology Efence · CVSS 8.7 High · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [Thinking Software Technology｜EFence - Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-80235.md)
  `CVE-2026-80235` · CVE record: Thinking Software Technology EFence · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-80233.md)
  `CVE-2026-80233` · CVE record: CAYIN Technology CAYIN CMS-WS and 2 more · CVSS 8.6 High · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [tamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS.](https://agentprime.io/advisories/CVE-2026-75331.md)
  `CVE-2026-75331` · CVE record · CVSS 4.6 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:](https://agentprime.io/advisories/CVE-2026-75327.md)
  `CVE-2026-75327` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file.](https://agentprime.io/advisories/CVE-2025-61165.md)
  `CVE-2025-61165` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Unrestricted file upload
- [ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints](https://agentprime.io/advisories/CVE-2026-80050.md)
  `CVE-2026-80050` · CVE record: continew-org continew-admin · CVSS 7.1 High · Not analysed yet · Published 25 Aug 2026 · Tags: Unrestricted file upload
- [reachy_mini Allows Unrestricted Upload of File with Dangerous Type](https://agentprime.io/advisories/GHSA-m2pc-3q4q-w6jr.md)
  `GHSA-m2pc-3q4q-w6jr`, `CVE-2026-55419`, `PYSEC-2026-3916` · PyPI `reachy-mini`: affected `<1.8.2`, fixed in `1.8.2` · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Unrestricted file upload
- [Webkul QloApps improper file upload validation](https://agentprime.io/advisories/CVE-2026-75496.md)
  `CVE-2026-75496` · CVE record: Webkul QloApps · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Unrestricted file upload
- [File Upload in TRTEK Software's Software Repository Management](https://agentprime.io/advisories/CVE-2026-16286.md)
  `CVE-2026-16286` · CVE record: TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Unrestricted file upload
- [CM Map Locations <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action](https://agentprime.io/advisories/CVE-2026-16601.md)
  `CVE-2026-16601` · CVE record: creativemindssolutions CM Map Locations – Visualize and share your locations in a few clicks · CVSS 8.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Unrestricted file upload
- [Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload](https://agentprime.io/advisories/CVE-2026-56702.md)
  `CVE-2026-56702` · CVE record: vrana adminer · CVSS 7.1 High · Not analysed yet · Published 25 Aug 2026 · Tags: Unrestricted file upload
- [WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-32559.md)
  `CVE-2026-32559` · CVE record: tophive UltimateAI · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Unrestricted file upload
- [Unrestricted upload of file with dangerous type in Prospero Flow CRM allows stored cross-site scripting via SVG](https://agentprime.io/advisories/CVE-2026-78337.md)
  `CVE-2026-78337` · CVE record: Roskus Prospero Flow CRM · CVSS 4.8 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Unrestricted file upload
- [itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted upload](https://agentprime.io/advisories/CVE-2026-78245.md)
  `CVE-2026-78245` · CVE record: itsourcecode Online Pharmacy System · CVSS 6.9 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [itsourcecode Payroll System admin_class.php save_settings unrestricted upload](https://agentprime.io/advisories/CVE-2026-78202.md)
  `CVE-2026-78202` · CVE record: itsourcecode Payroll System · CVSS 6.9 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-19852.md)
  `CVE-2026-19852` · CVE record: CyberTutor NewSiteServer (NSS) · CVSS 5.1 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Unrestricted file upload
- [xShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution](https://agentprime.io/advisories/CVE-2026-49849.md)
  `CVE-2026-49849` · CVE record: 4xmen xshop · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Unrestricted file upload
- [CodeAstro Online Job Portal update-profile.php unrestricted upload](https://agentprime.io/advisories/CVE-2026-77681.md)
  `CVE-2026-77681` · CVE record: CodeAstro Online Job Portal · CVSS 5.3 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution](https://agentprime.io/advisories/GHSA-ghvf-qf6h-g8x5.md)
  `GHSA-ghvf-qf6h-g8x5` · npm `@nocobase/server`: affected `<2.1.5`, fixed in `2.1.5` · No CVSS score · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal, Information disclosure, Unrestricted file upload, CWE-829
- [Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a \`data:image\` prefix — SVG-with-script lands on the public disk](https://agentprime.io/advisories/GHSA-8hw4-7qjr-3wxg.md)
  `GHSA-8hw4-7qjr-3wxg`, `CVE-2026-54179`, `PKSA-gr8y-xsj7-jw48` · Packagist `backpack/crud`: affected `>=6.0.0, <6.8.14 || >=7.0.0, <7.0.38`, fixed in `6.8.14`, `7.0.38` · CVSS 4.4 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Cross-site scripting (XSS), Unrestricted file upload
- [Laravel Backpack CRUD: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of \`shell.php\` reach the webserver](https://agentprime.io/advisories/GHSA-8q2w-pv9p-mjvc.md)
  `GHSA-8q2w-pv9p-mjvc`, `CVE-2026-54177`, `PKSA-4pjj-nc36-rj91` · Packagist `backpack/crud`: affected `>=6.0.0, <6.8.14 || >=7.0.0, <7.0.38`, fixed in `6.8.14`, `7.0.38` · CVSS 6.6 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [) Missing Server-Side File Extension Validation in vsDesk](https://agentprime.io/advisories/CVE-2026-2334.md)
  `CVE-2026-2334` · CVE record: vsDesk vsDesk · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload](https://agentprime.io/advisories/CVE-2026-76995.md)
  `CVE-2026-76995` · CVE record: SourceCodester Simple Online Food Ordering System · CVSS 5.1 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Remote Code Execution via Unrestricted File Upload in ATutor](https://agentprime.io/advisories/CVE-2026-64960.md)
  `CVE-2026-64960` · CVE record: ATutor ATutor · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-74018.md)
  `CVE-2026-74018` · CVE record: themagnifico52 Warehouse Cargo · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Smart Cleaning theme <= 4.8.6 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-74016.md)
  `CVE-2026-74016` · CVE record: themagnifico52 Smart Cleaning · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [WordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-74014.md)
  `CVE-2026-74014` · CVE record: indithemes IT Residence · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-66600.md)
  `CVE-2026-66600` · CVE record: David Lingren Media LIbrary Assistant · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious configuration file.](https://agentprime.io/advisories/CVE-2026-14946.md)
  `CVE-2026-14946` · CVE record: Frauscher Sensortechnik FDS 102 · CVSS 8.6 High · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [Depicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP Import](https://agentprime.io/advisories/CVE-2026-15049.md)
  `CVE-2026-15049` · CVE record: Unknown Depicter — Popup & Slider Builder · CVSS 7.2 High · Not analysed yet · Published 20 Aug 2026 · Tags: Unrestricted file upload
- [DeDeCMS select_media_post.php unrestricted upload](https://agentprime.io/advisories/CVE-2026-76800.md)
  `CVE-2026-76800` · CVE record: DeDeCMS · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Wekan: File Upload MIME Type Validation Bypass — Stored XSS via Missing System Binary Fallback](https://agentprime.io/advisories/CVE-2026-68899.md)
  `CVE-2026-68899` · CVE record: wekan wekan · CVSS 8.7 High · Not analysed yet · Published 19 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-32475.md)
  `CVE-2026-32475` · CVE record: Elementor Elementor Pro · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Unrestricted file upload
- [Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3](https://agentprime.io/advisories/CVE-2026-75949.md)
  `CVE-2026-75949` · CVE record: cmsjunkie.com J-BusinessDirectory extension for Joomla · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Unrestricted file upload
- [Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64](https://agentprime.io/advisories/CVE-2026-74803.md)
  `CVE-2026-74803` · CVE record: yootheme.com Zoo extension for Joomla · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Unrestricted file upload
- [Joomla! Core - \[20260810\] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2](https://agentprime.io/advisories/CVE-2026-73373.md)
  `CVE-2026-73373` · CVE record: Joomla! Project Joomla! CMS and 1 more · CVSS 8.9 High · Not analysed yet · Published 18 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-73996.md)
  `CVE-2026-73996` · CVE record: ThemeGrill Masteriyo - LMS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Unrestricted file upload
- [WordPress GP Premium plugin <= 2.5.5 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-66627.md)
  `CVE-2026-66627` · CVE record: EDGE22 Studios Ltd. GP Premium · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-32474.md)
  `CVE-2026-32474` · CVE record: wpWax Templatiq · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-32463.md)
  `CVE-2026-32463` · CVE record: Kamlesh Parmar Sync Post With Other Site · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Unrestricted file upload
- [WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.67 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2026-28192.md)
  `CVE-2026-28192` · CVE record: Piotnet Piotnet Addons For Elementor Pro · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Unrestricted file upload
- [OpenBoxes Document Upload Controller DocumentController.groovy DocumentController unrestricted upload](https://agentprime.io/advisories/CVE-2024-14046.md)
  `CVE-2024-14046` · CVE record: OpenBoxes · CVSS 5.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Broken access control, Unrestricted file upload
- [Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration](https://agentprime.io/advisories/CVE-2026-15748.md)
  `CVE-2026-15748` · CVE record: wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Unrestricted file upload
- [Unrestricted file upload in WordPress](https://agentprime.io/advisories/CVE-2026-65640.md)
  `CVE-2026-65640` · CVE record: WordPress WordPress · CVSS 8.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Unrestricted file upload
- [Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller](https://agentprime.io/advisories/CVE-2026-16137.md)
  `CVE-2026-16137` · CVE record: Progress ShareFile Storage Zones Controller · CVSS 7.2 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal, Unrestricted file upload
- [2100 Technology｜Official Document Management System - Arbitrary File Upload](https://agentprime.io/advisories/CVE-2026-74845.md)
  `CVE-2026-74845` · CVE record: 2100 Technology Official Document Management System · CVSS 8.7 High · Not analysed yet · Published 17 Aug 2026 · Tags: Unrestricted file upload
- [File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code](https://agentprime.io/advisories/CVE-2026-67678.md)
  `CVE-2026-67678` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Unrestricted file upload
- [File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document…](https://agentprime.io/advisories/CVE-2026-50768.md)
  `CVE-2026-50768` · CVE record · CVSS 8.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Unrestricted file upload
- [ProSolution WP Client <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override](https://agentprime.io/advisories/CVE-2026-16098.md)
  `CVE-2026-16098` · CVE record: prosolution ProSolution WP Client · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2026 · Tags: Unrestricted file upload
- [Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution via 'options' Parameter](https://agentprime.io/advisories/CVE-2026-14498.md)
  `CVE-2026-14498` · CVE record: daggerhart Query Wrangler · CVSS 8.8 High · Not analysed yet · Published 16 Aug 2026 · Tags: Unrestricted file upload
- [Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb](https://agentprime.io/advisories/CVE-2026-74767.md)
  `CVE-2026-74767` · CVE record: pandora-analysis pandora · CVSS 8.7 High · Not analysed yet · Published 15 Aug 2026 · Tags: Unrestricted file upload

Newest: <https://agentprime.io/advisories/tag/file-upload.md>
Older: <https://agentprime.io/advisories/tag/file-upload.md?cursor=WyIyMDI2LTA4LTE1VDIxOjU2OjQ0LjU2MjAwMFoiLCJDVkUtMjAyNi03NDc2NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=file-upload&cursor=WyIyMDI2LTA4LTI5VDEzOjQ3OjUzLjMxMjAwMFoiLCJDVkUtMjAyNi04MjQ1MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/file-upload/?cursor=WyIyMDI2LTA4LTI5VDEzOjQ3OjUzLjMxMjAwMFoiLCJDVkUtMjAyNi04MjQ1MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.