CVE-2023-1484

CVE-2023-1484 affects xzjie cms up to 1.0.3. The vulnerability resides in the processing of the file at the endpoint "/api/upload" where manipulating the uploadFile argument leads to unrestricted upload. This could enable remote exploitation. Connected PT-Security advisory confirms versions up to...