Cpe:2.3:a:thelia:thelia:*:*:*:*:*:*:*:*

An unrestricted file upload vulnerability in Thelia allows authenticated back-office users to achieve remote code execution by bypassing filename sanitization.