A web scan by ZAP indicated that my website is vulnerable to a Remote OS command injection. Details are below:
This is the URL the scanner found vulnerable:
This is the exploit:
Is this considered a true exploit or just a false positive?