Commit Message: Front office: Fix possible temporary remote code execution (Thanks @m0x41nos !) Affected Files: - upload/changelog/553.json - upload/includes/classes/ClipBucket.class.php - upload/includes/classes/category.class.php - upload/includes/classes/collections.class.php - upload/includes/classes/fileupload.class.php - upload/includes/classes/photo_thumbs.class.php - upload/includes/classes/photos.class.php - upload/includes/classes/upload.class.php - upload/includes/classes/video_thumbs.class.php - upload/includes/functions.php Vulnerability Type: Temporary Remote Code Execution (RCE) Vulnerability Details: - The commit fixes an issue related to temporary remote code execution, likely caused by improper validation of uploaded files. - Changes are made to various functions handling file uploads and validations. - The fix involves adding checks for file types and ensuring that only allowed extensions are processed. - The code ensures that the file is a valid image type before processing it further. Credits: Thanks to @m0x41nos for identifying the vulnerability