Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbitrary code.

Published Oct 5, 2026 · Updated Oct 6, 2026 · Assigned by mitre