PHP ACRSS version 1.0 suffers from a PHP code injection vulnerability.