≤ 3.7.1
Chemex through 3.7.1 is vulnerable to arbitrary file upload.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.