CVE-2022-30821

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0

Description The issue concerns an arbitrary file upload vulnerability located in the picture upload point of the "package edit.php" file within the "Services" module of the background management system. This vulnerability is related to the editing function.

Recommendations For Wedding Management System version 1.0, consider disabling the file upload functionality in the "package edit.php" file until a patch is available to prevent exploitation of the arbitrary file upload vulnerability. Restrict access to the "Services" module to minimize the risk of exploitation. Avoid using the picture upload point in the affected module until the issue is resolved.