Tschan changed the code to allow only image file types GIF, JPG, JPEG, ... jQuery File Upload has been vulnerable for eight years, since the Apache 2.3.9 release in 2010.

A widely used plugin by Blueimp called jQuery File Upload contains a years-old vulnerability that potentially places 7,800 different software applications at risk for compromise and remote code ...

All jQuery File Upload versions before 9.22.1 are vulnerable. Since the vulnerability affected the code for handling file uploads for PHP apps, ...