JSN Framework System Plugin, versions 2.1.5 and previous, unrestricted file uploads without any authorization
Resolution: update to 2.1.6
Update notice: https://www.joomlashine.com/forums/jsn-extension-framework-gen-1-plugin-v2-1-6-is-released.html
Users are strongly urged to update immediately