Do Son CVE-2022-35914 allows a remote attacker to execute arbitrary PHP code on the system, caused by a flaw in the script in the htmlawed module
CVE-2022-33891
Spark released the latest security bulletin, which contains a shell command injection vulnerability (CVE-2022-33891). The severity is important