Describe CVE-2021-28294.
What is CVE-2021-28294?
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE)..