CVE-2024-25166

The 71CMS v.1.0.0 smart party building system contains a Cross Site Scripting (XSS) vulnerability. A remote attacker can exploit this by targeting the uploadfile action parameter within the controller.php file to execute arbitrary code. While the impact is described as a breach of security, speci...