com_media allowed paths that are not intended for image uploads to RCE - View it on GitHub