CVE-2023-30613

CVE-2023-30613 is a critical arbitrary file upload vulnerability affecting Kiwi TCMS versions prior to 12.2, allowing attackers to upload malicious files like executables or JavaScript-embedded documents. With a CVSS score of 9.0 (Critical), it presents a high risk due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability if a user is tricked into interacting with the malicious file. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness within the cybersecurity community.