CVE-2024-2561

The vulnerability CVE-2024-2561 affects 74CMS 3.28.0. Affected component: Company Logo Handler, function sendCompanyLogo in /controller/company/Index.php#sendCompanyLogo. The arg imgBase64 can be manipulated to lead to unrestricted file upload, allowing remote execution per CNVD/CNNVD/PT security...