EIP-2026-108660

This exploit demonstrates an arbitrary file upload vulnerability in Joomla! Component GMapFP 3.30, allowing attackers to bypass file extension restrictions by uploading malicious files with double extensions (e.g., file.php.png). The uploaded files can be accessed directly, leading to potential remote code execution (RCE).