CVE-2024-1353

PHPEMS up to version 1.0 is affected by CVE-2024-1353. The vulnerability resides in the index function of app/weixin/controller/index.api.php, where manipulating the picurl argument leads to deserialization. The issue is publicly disclosed and exploitable per the sources in the connected document...