Microweber v2.0.20 - Unauthenticated Arbitrary File Read and Path-Controlled File Write via thumbnail_img

[Leousum]

I discovered multiple security vulnerabilities in Microweber. I have sent the reproduction steps, root cause, and other relevant information to admin@microweber.com and look forward to your reply.