PT-2022-11661

Name of the Vulnerable Software and Affected Versions Kreado Kreasfero version 1.5 Description The issue arises from improper sanitization of uploaded files to the media directory, allowing an attacker to upload a malicious PHP file and achieve remote code execution. Recommendations For version...