class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18185
Reference (s):
- https://github.com/pluxml/PluXml/issues/321