ForestBlog Arbitrary File Upload Vulnerability

ForestBlog is an application, a personal blog. An arbitrary file upload vulnerability exists in ForestBlog 20220630 and earlier versions, which stems from a lack of valid validation of the uploaded file by the parameter filename in the file /admin/upload/img. An attacker can exploit this vulnerability to upload malicious files and remotely execute arbitrary code.