Threats tagged 'ghsa-h469-4qhx-pwh7'

A security vulnerability exists in Bdtask/CodeCanyon News365 versions up to 7.0.3 involving unrestricted file upload via the profile_image/banner_image parameters in the /admin/dashboard/profile endpoint. The flaw allows remote attackers with high privileges to upload arbitrary files. Public exploit code is available, but no vendor response or patch has been provided.