Input validation vulnerability in EnvíaloSimple: Email Marketing y Newsletters 2.3

The EnvíaloSimple plugin for WordPress, used for email marketing and newsletters, has a security vulnerability known as Cross-Site Request Forgery. This vulnerability affects all versions up to 2.3 of the plugin. The issue is caused by a missing or incorrect security measure when adding images to the gallery. This can allow hackers to upload harmful files if they can deceive a site administrator into clicking a link. Although the Cross-Site Request Forgery was fixed in version 2.4, the ability to upload any type of file was not addressed.