CVE-2024-29368 Information

Description

An issue discovered in moziloCMS v2.0 allows attackers to bypass file upload restrictions and run arbitrary code by changing the file extension after upload via crafted POST request.

Reference

https://github.com/becpn/mozilocms