Path Traversal Vulnerability Affects Stockholm

CVE-2024-34552

What is CVE-2024-34552?

The Stockholm theme by Select-Themes contains a vulnerability that allows for improper limitation of a pathname to a restricted directory, resulting in a Path Traversal exploit. This security flaw enables attackers to potentially execute arbitrary PHP files through Local File Inclusion (LFI). The issue affects versions from n/a through 9.6, exposing users to significant risks if not addressed promptly. Stakeholders are advised to review their installations and apply security patches to mitigate potential threats.

References