PT-2026-23175 · Mikado Themes · Gotravel

Tran Nguyen Bao Khanh

·

CVE-2026-22427

·

Publicado

2026-03-05

·

Atualizado

2026-03-08

CVSS v3.1

8.1

Alta

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mikado-Themes GoTravel versions through 2.1
Description The GoTravel software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local files.
Recommendations Versions prior to and including 2.1 should be updated.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2026-22427

Produtos afetados

Gotravel