baowzh hfly

• CVE-2025-14522 Medium 6.3 baowzh hfly upload_json.php unrestricted upload 0.3%
• CVE-2025-14521 Medium 4.3 baowzh hfly download path traversal 0.6%
• CVE-2025-14520 Medium 5.4 baowzh hfly delfile path traversal 0.6%
• CVE-2025-14519 Low 3.5 baowzh hfly advtext add cross site scripting 0.3%