Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php.
- https://github.com/ajayrandhawa/Grocery-CMS-PHP-Restful-API/issues/5
No PoCs found on GitHub currently.