Remote Code Execution (RCE)

magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as an admin, who is able to create or edit a product, is able to upload RCE payloads through XML layout updates...