Seems to be exploited and confirmed by Defused

https://db.gcve.eu/comment/fdd15828-339e-4711-a71a-6b92792a4aaf