CVE-2024-55371

The Wallos personal subscription tracker (versions 2.38.2 and earlier ) is susceptible to a file upload vulnerability within the Restore Backup function. This flaw allows an authenticated user—without requiring administrator privileges—to upload a ZIP file that is subsequently extracted by the se...