The issue is related to the improper sanitization of certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This can allow a remote attacker to execute arbitrary PHP code on the server. The estimated number of potentially affected devices worldwide is not specified.