This issue was discovered by Dawid Golunski (http://legalhackers.com)
Attach a file by drag & drop or click to upload