PT-2024-37984 · Flute Cms · Flute Cms

Name of the Vulnerable Software and Affected Versions: Flute CMS version 0.2.2.4-alpha Description: A critical issue affects the Avatar Upload Page component, specifically the file app/Core/Http/Controllers/Profile/ImagesController.php. The manipulation of the avatar argument leads to unrestricte...