CVE-2022-41379

CVE-2022-41379 affects Online Leave Management System v1.0. The vulnerability is an arbitrary file upload in the component path /leave_system/classes/Users.php?f=save, allowing an attacker to execute arbitrary code via a crafted PHP file. The published metrics list a CVSS 3.1 base score of 7.2 (H...