Ex3Ptional

The issue allows unauthenticated users to upload arbitrary files, including malicious PHP code, which could lead to remote code execution (RCE). This is due to a lack of validation for uploaded files.