Design/Logic Flaw

In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...