Cpe:2.3:a:frangoteam:fuxa:*:*:*:*:*:*:*:*

A remote code execution (RCE) vulnerability exists in FUXA version 1.2.9 and earlier due to an unauthenticated path traversal issue in the /api/upload endpoint, allowing attackers to write arbitrary files and execute code.