Unrated
Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution.
CVE-2019-8293
First seen on SecPulse
References
- patch github.com
- report openwall.com