An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection function