[CRITICAL] PHP Code Injection

PKSA-wpwn-b9wt-r2vm CVE-2015-5243 GHSA-c95f-27gx-6vq9

Affected version: <=4.2.6

Reported by:
GitHub, FriendsOfPHP/security-advisories