A security researcher has found a severe security flaw in one of the internet's most popular PHP libraries ... achieve "remote code execution" on websites and web apps that use the TCPDF library ...