# Exploit Title: Hyip Rio 2.1 - Arbitrary File Upload# Exploit Author: CraCkEr# Date: 30/07/2023# Vendor: tdevs# Vendor Homepage: https://tdevs.co/# Software Link: https://hyiprio-feature.tdevs.co/# Tested on: Windows 10 Pro# Impact: Allows User to upload files to the web server# CVE: CVE-2023-4382## DescriptionAllows Attacker to upload malicious files onto the server, such as Stored XSS## Steps to