CVE-2024-13311

The Allow All File Extensions module for file fields in Drupal CMS systems is vulnerable to remote code execution due to insufficient validation of input data . This flaw specifically affects the module when configured with the 👀.👀 wildcard. Exploitation of this vulnerability allows a malicious a...