CVE-2023-31585

The Grocery-CMS-PHP-Restful-API v1.3 software is vulnerable to an Unrestricted Upload of File with Dangerous Type (CWE-434) via the /admin/add-category.php API endpoint. This flaw allows for the upload of potentially malicious files. To mitigate the risk, it is recommended to disable the file upl...