We are seeing attacks in the wild for it already. Mostly defacement attempts at the moment.

Marc, the researcher that found it, wrote the technical details here:

https://blog.sucuri.net/2017/02/content-injection-vulnerabil...

thanks,