The plugin suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE.
The PoC will be displayed once the issue has been remediated
UPLOAD
Jin Huang
Jin Huang
Yes
2021-03-26 (about 1 years ago)
2021-03-26 (about 1 years ago)
2021-04-01 (about 1 years ago)