CVE-2020-5505: Improper Neutralization of Special Elements used in an OS Command

Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring in conjunction with "type":"application/x-php" to the /api/files/ URI...