CVE-2024-25274

The Novel-Plus online social reading and writing platform (version v4.3.0-RC1 ) contains an arbitrary file upload vulnerability in the /sysFile/upload component. An attacker can exploit this by uploading a specially crafted file to achieve arbitrary code execution . To mitigate this risk, it is r...