MediaWiki:Config-uploads-not-safe
Appearance
Warning: Your default directory for uploads $1
is vulnerable to arbitrary scripts execution.
Although MediaWiki checks all uploaded files for security threats, it is highly recommended to close this security vulnerability before enabling uploads.