CVE-2023-28699

CVE-2023-28699 affects Wade Graphic Design FANTSY. The vulnerability is insufficient filtering for file type in the file update function, enabling an authenticated remote user with general privileges to upload a PHP file containing a webshell and perform arbitrary system operations or disrupt ser...