CVE-2021-36581

Name of the Vulnerable Software and Affected Versions Kooboo CMS version 2.1.1.0

Description The issue allows for insecure file upload, enabling the upload of any file extension to the server. The server fails to verify the file extension, which was demonstrated by successfully uploading an aspx file.

Recommendations For Kooboo CMS version 2.1.1.0, consider restricting file uploads to only necessary and verified extensions as a temporary workaround until a patch is available. Restrict access to the file upload functionality to minimize the risk of exploitation.