Input validation vulnerability in sem-wysiwyg 1.0

The Sem-Wysiwyg plugin for WordPress is vulnerable to malicious files being uploaded without permission. This vulnerability affects versions up to and including 1.0. It is possible for unauthenticated attackers, meaning people who have not been granted the proper access, to upload malicious files onto the affected website’s server. This could allow the attacker to execute code on the server, which could be used to take control of the website.