File upload vulnerability in XHCMS backend (CNVD-2021-34276)

XHCMS is a general-purpose cms system generated based on xhadmin, which supports full-site staticization. A file upload vulnerability exists in the background of XHCMS. Attackers can use this vulnerability to obtain server control privileges...