A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.Referenceshttps://github.com/bludit/bludit/issues/1298