See original article: [webapps] – WordPress Curvo Themes – CSRF File Upload Vulnerability
Your browser doesn't support the HTML5 CANVAS tag.