Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arbitrary PHP code.
CVE Status: Modified
No CVSS data available
Exploit-db Github