CVE-2024-25274

Novel-Plus version v4.3.0-RC1 is susceptible to an arbitrary file upload vulnerability within the /sysFile/upload component. This flaw allows an attacker to upload a specially crafted file, leading to arbitrary code execution . To mitigate this risk, it is recommended to disable the /sysFile/uplo...