Skip to content
OpenAdvisories
Critical · 9.1 CVE-2023-1722 EUVD-2023-23945GHSA-r7rj-r49c-jw49

Yoga Class Registration System 1.0 - ATO

Published Jun 24, 2023 · Updated Nov 27, 2024 · Assigned by Fluid Attacks

Description

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Affected products

VendorProductAffectedFixed
Yoga Class Registration System Yoga Class Registration System 1.0 —

References