An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')