description: pixl-class prior to 1.0.3 allows execution of arbitrary commands. The members argument of the create function can be controlled by users without any sanitization.
problem types: Arbitrary Code Execution
affected:
{
product: pixl-class
vendor: n/a
versions:
status: affected, version: All versions prior to 1.0.3
}