Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.0289·Published 2021-08-16·Fixed in 0.9.0CWE-434