An issue exists where the software allows the upload of dangerous file types if the application accepts or prefers a client-supplied MIME type during file upload handling. A remote attacker can bypass restrictions by submitting a file containing executable PHP code while declaring a benign image MIME type, leading to arbitrary file upload. If the uploaded file is stored in a web-accessible and executable location, this can result in remote code execution.