Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the CalcField.php process. An attacker can execute arbitrary PHP code or cause a server crash by submitting specially crafted input that bypasses sanitization and is processed by the eval function. Remediati...