DoubleScale CRM arbitrary file upload vulnerability

DoubleScale CRM versions 1.5.1 and earlier have a vulnerability related to arbitrary file uploads. This vulnerability stems from the storeupload function, which allows for arbitrary file uploads. The extensionisallowed function, which is responsible for checking whether files with unrecognized...