PT-2025-45194
CVE-2025-39467
·
Published
2025-04-17
·
Updated
2026-10-18
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Wanderland versions prior to 1.7.2
Description
A path traversal issue involving the sequence '.../...//' allows PHP Local File Inclusion, which occurs when an application includes a file without properly validating the input, potentially allowing an attacker to read sensitive files on the server.
Recommendations
Update to a version newer than 1.7.1.
Found an issue in the description? Have something to add? Feel free to write us 👾