CVE-2019-12839: Improper Neutralization of Special Elements used in an OS Command

In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration txtSendmailPath parameter that allows authenticated attackers to achieve arbitrary command execution...