AjaxUpload

Display an upload area for uploading multiple files in a form. The upload queues can be filled and saved by FormIt hooks.

Installation by MODX Package Management

This release fixe some security issues:

• Harden the remote fetch URL validation
• Harden the load file handling
• Harden the MIME type test in the upload handling
• Harden the AjaxUploadRemove hook
• Add disallowed file extensions that an uploaded file cannot use CVE-2026-95237

The security issues were detected by Sosecure; Grim The Ripper Team by SOSECURE Thailand; Mr. Warathap Ratsameekomon

Breaking change in 2.0.0: see jako.github.io/AjaxUpload/migration