Product
The AskAny WordPress plugin before 2.2.0 does not validate the extension or content of files attached to chat messages, trusting the browser-supplied file type. This allows unauthenticated users to upload PHP files and execute arbitrary code when visitor attachments are enabled.