First published: Tue Nov 14 2023(Updated: )
### Impact When using the file uploads feature, it was possible to upload PHP files. ### Patches The vulnerability is fixed in v3.1.2.
|Affected Software||Affected Version||How to fix|
The vulnerability ID is GHSA-rw82-mhmx-grmj.
The impact is that it allows the uploading of PHP files through the file uploads feature.
You can fix this vulnerability by updating to version 3.1.2 of the affected software.
The severity is high with a CVSS score of 8.8.
The CWE ID is 434.