Launchpad.net

CVE 2019-8293

Due to a logic error in the code, upload-image-with-ajax v1.0 allows arbitrary files to be uploaded to the web root allowing code execution.

See the CVE page on Mitre.org for more details.