Microweber allows Unrestricted File Upload

Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/loadmodule:usersedit-user=1 does not verify that the file extension used with the Add Image option on the Edit User screen corresponds to an image file...

PT-2020-13391

Name of the Vulnerable Software and Affected Versions Microweber version 1.1.18 Description The issue allows Unrestricted File Upload because the "admin/view:modules/load module:usersedit-user=1" endpoint does not verify that the file extension corresponds to an image file when using the Add Imag...