CVE-2023-48965: Unrestricted Upload of File with Dangerous Type

An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP file...