Description
jQuery File Upload is a file upload widget with multiple file selection, drag&drop support, progress bars, validation and preview images, audio and video for jQuery.
A change in Apache's Web Server security setting handling exposed users of this plugin to an unrestricted file upload flaw.
Remediation
Upgrade to the latest version of jQuery File Upload. This vulnerability was fixed in jQuery File Upload v9.22.1
References
Related Vulnerabilities
WordPress Plugin Front-end Editor 'upload.php' Arbitrary File Upload (2.2.1)
WordPress Plugin Church Admin Arbitrary File Upload (1.2530)
WordPress Plugin AIT Themes-CSV Import/Export Arbitrary File Upload (3.0.3)
WordPress Plugin WordPress Download Manager Arbitrary File Upload (2.8.97)
WordPress Plugin MiniMax-Page Layout Builder Arbitrary File Upload (1.7.1)