PT-2021-11455

Name of the Vulnerable Software and Affected Versions: Simple College Website version 1.0 Description: The issue allows a user to conduct remote code execution via the "/alumni/admin/ajax.php?action=save settings" API endpoint when uploading a malicious file using the image upload functionality...