CVE-2022-35150

Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...

CVE-2022-35150

Baijicms v4 contains an arbitrary file upload vulnerability due to lack of validation of uploaded files. Reported across multiple sources (CNVD/CNNVD/NI CVD records) with potential for remote code execution and high impact (based on CVSS 3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H). E...