CVE-2019-7721: Unrestricted Upload of File with Dangerous Type

lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters...