File upload vulnerability in YFCMF backend

YFCMF is a backend content management system using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the background of YFCMF, which can be exploited by attackers to gain control of the server...