Thanks, interesting, but not sure how to reconcile that you don't have mod_security as a dependency nor do I have it installed. It, I'm guessing, would think there was something wrong and block it. But here with it not being installed makes it not look like the correct why.
Looking at log files I see:
nginx/error.log
2020/05/01 13:22:04 [error] 1386#1386: *6 client intended to send too large body: 4684422 bytes, client: 10.1.6.37, server: localhost, request: "POST /zenphoto/zp-core/zp-extensions/uploader_jQuery/uploader.php HTTP/1.1", host: "10.1.6.231", referrer: "http://10.1.6.231/"
access.log
10.125.65.37 - - [01/May/2020:13:22:05 +0000] "POST /zenphoto/zp-core/zp-extensions/uploader_jQuery/uploader.php HTTP/1.1" 413 586 "http://10.1.6.231/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3831.6 Safari/537.36" "-"
Here we have the http error 413 (Request entity too large).
PHP 7.2 is in use.