A vulnerability exists in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform version 1.3.0, specifically in the /SubstationWEBV2/main/uploadH5Files file. The flaw allows unrestricted file upload through manipulation of the File argument. This vulnerability can be exploited remotely and has publicly available exploit code. The vendor has not responded to the disclosure, and no patch or remediation information is currently available.