EIP-2026-104297

This writeup describes a vulnerability in jQuery uploadify v2.1.0 where the file type filter can be bypassed by manually entering a malicious file path in the file browser dialog. It provides steps to exploit the vulnerability and suggests fixes.