Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
Link | Tags |
---|---|
https://github.com/Tr0ee/bug_report/blob/main/vendors/pushpam02/wedding-planner/RCE-1.md | third party advisory exploit |