Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php.Referenceshttps://github.com/guodongtech/jellycms/issues/1