CVE-2025-22213

Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt