MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution.