system
Describe <CVE-2019-13961>.
user
What is <CVE-2019-13961>?
assistant
A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php..