CVE-2021-44911

XpressEngine (XE) before 1.11.6 is vulnerable to unrestricted file upload via modules/menu/menu.admin.controller.php. The attack vector arises when using the Mouse over/Selected buttons, which do not enforce file suffix restrictions, allowing any file to be uploaded to the files directory. Upload...