avatar uploader %5bobject Object%5d Vulnerabilities