[PWNED-471-aluFinal] unauth content injection (CVE-2017-1001000).