PHPMailer Remode Code Execution Vulnerability / PwnScriptum

PHPmailer is a PHP class that provides a package of functions to send email. The component is widely used in PHP web applications including content management systems (CMS) like WordPress, Drupal and Joomla.

The component is affected by a remote code execution (RCE) vulnerability if the "From" address is set from user input. (see [1] for additional information).

Airlock WAF does not protect by default. A custom Deny Rule can be created to prevent exploitation of the vulnerability.