Drupal Email Input Filter Module Code Execution Vulnerability

A vulnerability has been reported in the Email Input Filter module for Drupal, which could be exploited by remote attackers to compromise a vulnerable system.

Input passed to the Email Input Filter module is not properly sanitised before being used to create content. This can be exploited to inject and execute arbitrary PHP code.

Successful exploitation requires the permission to create content using an input format with the email input filter enabled.