Path Traversal Vulnerability Affects Consulting

CVE-2023-37385

What is CVE-2023-37385?

A path traversal vulnerability exists in StylemixThemes Consulting that allows for unauthorized access to sensitive files on the server via PHP local file inclusion. This issue arises from improper limitations on pathnames, which can be exploited by attackers to gain access to restricted directories. Users of Consulting versions up to 6.5.6 are particularly at risk and should take immediate action to secure their installations.

References