I'm not sure why an issue that's been discovered a year ago has not been fixed yet!    And a security issue no less!   Seriously considering other products due to this not getting fixed promptly.    I opened a ticket regarding this 12/14/2017 and it's still not fixed!