CVE-2024-25166

A Cross Site Scripting (XSS) vulnerability exists in 71CMS v.1.0.0 , an open-source smart party building system. The flaw allows a remote attacker to achieve arbitrary code execution by exploiting the uploadfile action parameter within the controller.php file. To mitigate this risk, it is recomme...