Hate 'contact us' forms? This PHPmailer zero day will drop shell in sender

Borked patch opens remote code execution on web servers

Websites using PHPMailer for forms are at risk from a critical-rated remote code execution zero day bug."