CVE-2023-31585

Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to an unrestricted file upload vulnerability via the /admin/add-category.php API endpoint. This flaw allows an attacker to upload potentially malicious files to the server. As a temporary workaround, it is recommended to disable the file upload funct...