Unrestricted File Upload

NopCommerce.Core is vulnerable to unrestricted file upload. The vulnerability exists because the UploadAvatar function of CustomerController.cs does not properly check the file type before uploading the file, allowing an attacker to perform arbitrary file uploads...