PT-2026-66682

Name of the Vulnerable Software and Affected Versions CodeIgniter versions prior to 4.7.4 Description Calling the move function within the UploadedFile class without providing a second argument allows the application to use the client-provided filename without proper sanitization. This enables a...