CISA confirms active exploitation of two PHP2Shell flaws

Remote code execution, actively exploited. Capcom even took Street Fighter 5 offline over a PHP security issue. Patch your PHP stacks folks. Anyone know if common hosting panels are affected?