TI-2021-03318 CVE-2021-4462 · GHSA-cm35-q368-98g3Employee Records System v1.0 Arbitrary File Upload RCEPriority HIGH 81Employee Records System version 1.0 contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload arbitrary files via the uploadID.php endpoint; uploaded files can be executed…CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.03417 · Published 2025-11-10 · No fix listed CWE-434