The FoF Pretty Mail extension version 1.1.2 for Flarum suffers from a command injection vulnerability.