Wedding Management System Arbitrary File Upload Vulnerability (CNVD-2022-54289)

Wedding Management System v1.0 is an arbitrary file upload vulnerability in the package_edit.php page, which is caused by a lack of validation of the image upload port on the package_edit.php page. The vulnerability is caused by the lack of validation of uploaded files on the package_edit.php page, which can be exploited to upload malicious files and remotely execute arbitrary code.