EIP-2026-113030

The vulnerability in VBZoom 1.01 allows arbitrary file uploads due to client-side JavaScript validation. An attacker can exploit this to upload malicious PHP scripts, leading to remote code execution (RCE) in the context of the hosting site.