The plugin family "Code Execution" scans the request for any remote code execution vulnerability. It tries to insert payloads to test if

• code will be directly executed inside eval()
• code will be executed inside a string that gets evaled
• code will be inserted in another string before it gets evaled

Chorizo's Advisor will give you more detailed information about the problem itself, a general solution and provides a solution PHP code how to solve your problem.

Back to Help Center.