Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Link | Tags |
---|---|
https://github.com/debug601/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md | third party advisory exploit |