Bacihanmao

**Name of the Vulnerable Software and Affected Versions** flusity-CMS version 2.33 **Description** The issue concerns an Unrestricted Upload of File with Dangerous Type in the update setting.php file. This allows for potential malicious file uploads. **Recommendations** For flusity-CMS version 2.33, as a temporary workaround, consider restricting access to the update setting.php file until a patch is available. Avoid using this file for uploading files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.