PT-2019-12268

Name of the Vulnerable Software and Affected Versions WCMS version 0.3.2 Description The issue concerns an arbitrary file upload vulnerability. This is due to the fm get text exts function considering .php as a valid extension, allowing for potential malicious file uploads via the developer/finde...