Nadav Erez

The issue exists due to improper neutralization of special elements. This may allow a remote attacker to execute arbitrary code and cause a denial-of-service condition, potentially through cross-site scripting attacks.

The issue is related to unrestricted file uploads, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. This could potentially enable an attacker to disrupt the system's operation.