A zero-day flaw in the popular jQuery File Upload plugin that could affect thousands of projects has been actively exploited for at least three years. Larry Cashdollar, security researcher for the ...