CVE-2022-2736

CVE-2022-2736 affects SourceCodester Company Website CMS, specifically the /dashboard/updatelogo.php file in the Background Upload Logo Icon component. The root cause is manipulation of the xfile/ufile argument, leading to unrestricted upload. The vulnerability can be triggered remotely, with doc...