CVE-2023-28699: Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with…

PriorityP355high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.86%

54.0th percentile

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disrupt service.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
wade_digital_design_co_ltd	fantsy	—	—
wddgroup	fantasy	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.