kindeditor php漏洞

<?php
$savePath = './uploads/';

if (!file_exists($savePath)) {
    mkdir($savePath, 0777, true);
}

$file = $_FILES['imgFile'];
$fileName = $file['name'];
$fileTmpName = $file['tmp_name'];
$fileSize = $file['size'];
$fileType = $file['type'];

$ext = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));
$saveName = md5(uniqid(microtime(true), true)) . '.' . $ext;
$savePathFull = $savePath . $saveName;

if (in_array($fileType, array('image/jpeg', 'image/png', 'image/gif'))) {
    if ($fileSize <= 2 * 1024 * 1024) { // 限制文件大小为 2MB
        if (move_uploaded_file($fileTmpName, $savePathFull)) {
            echo json_encode(array('error' => 0, 'url' => $savePathFull));
        } else {
            echo json_encode(array('error' => 1, 'message' => '上传失败'));
        }
    } else {
        echo json_encode(array('error' => 1, 'message' => '文件大小超过限制'));
    }
} else {
    echo json_encode(array('error' => 1, 'message' => '不支持的文件类型'));
}
?>