ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions.
From 神龙GPT (AIGC)
"ReviewPost PHP Pro 2.84之前允许远程攻击者上传和执行任意的PHP文件,通过上传具有多个扩展名的 review 文件,绕过了预期的限制。"