CVE-2023-43838: Personal-Management-System Personal Management System

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar.

Affected products

• Personal-Management-System Personal Management System: version 1.4.64 only

Published 2023-10-04. Last modified 2026-06-17.