and then include the SVG file in a post, to run the code. The process makes RCE “relatively easy”, it added. The bug was first spotted in early January 2025, with Artbees coming back with a ...

The flaw allows attackers to upload specially crafted SVG files containing PHP code. By chaining this with a vulnerability in the get_svg() function ... was reported by the researcher stealthcopter on ...