RCE vulnerability at Multi-action Workflow Post Function

A Jira Project Manager can exploit Xporter Multi-action Workflow Post Function by Server-Side Injection - Remote Code Execution. An attacker could create a template with malicious code and change the output file extension before creating the Post Function.