CVE-2023-36299

This CVE concerns Typecho 1.2.1, where a file upload vulnerability allows a remote attacker to execute arbitrary code via the upload and options-general parameters in index.php. Root cause is an exploitable file-upload pathway; impact is high (remote code execution) per CVSS metrics (NETWORK atta...