Exploit for Unrestricted Upload of File with Dangerous Type in Vvveb Vvvebjs

CVE-2024-29272 This is a Proof-of-Concept fo...

CVE-2024-29272

VvvebJs, a drag-and-drop website generator, contains an arbitrary file upload vulnerability in versions prior to 1.7.5 (with some sources citing prior to 1.7.7). The root cause is located in the sanitizeFileName parameter within the save.php file, which allows unauthenticated remote attackers to ...