File upload bugs are a class of security vulnerability in which an attacker is able to leverage bugs and misconfiguration in an application’s upload feature allowing them to upload web shells or other sorts of malicious payloads that are subsequently executed.
https://portswigger.net/web-security/file-upload