Sermsak

**Name of the Vulnerable Software and Affected Versions** eesy ID2WP – Publish InDesign HTML5 versions prior to 1.0.4 **Description** The plugin is subject to Path Traversal, a condition where an attacker can access files and directories that are stored outside the web root folder. Unauthenticated attackers can exploit this by using the `id2wp path` parameter to read arbitrary files on the server, potentially exposing sensitive information. **Recommendations** Update the plugin to a version newer than 1.0.3. Avoid using the `id2wp path` parameter until the update is applied.