The wp-file-upload plugin prior to 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
iptanus wordpress file upload