php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13619
Reference (s):
- https://locutus.io/php/
- https://reallinkers.github.io/CVE-2020-13619/
- https://www.npmjs.com/package/locutus