Unauthenticated Remote Command Injection in ep_imageconvert

ep_imageconvert is a plugin for [Etherpad Lite](https://github.com/ether/etherpad-lite). ep_imageconvert <= 0.0.2 is vulnerable to remote command injection.

Authentication is not required for remote exploitation.

## Recommendation

Update to version 0.0.3 or greater.