Threats tagged 'ghsa-858c-g64p-6mfh'

A vulnerability in Bdtask Flight Booking Software 4 allows unrestricted file upload via the /agent/profile/edit component. This weakness can be exploited remotely and has public exploit code available. The vendor has not responded to disclosure requests. The CVSS score is 6.3, indicating a medium severity impact affecting confidentiality, integrity, and availability.