EIP-2026-111684

This exploit describes an unauthenticated file upload vulnerability in RazorCMS <= 1.2.1, allowing attackers to upload malicious PHP files (webshells) to the server. The vulnerability stems from insufficient file extension validation, enabling remote code execution (RCE) via the uploaded file.