In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.
No PoCs from references.
- https://github.com/superlink996/chunqiuyunjingbachang