CyberRota Analysis
AI-GeneratedThe vulnerability in Edge-Themes Overworld allows for local file inclusion due to improper control of filenames in PHP include/require statements, potentially enabling attackers to execute arbitrary PHP code on the server. This poses a significant risk to any installations of Overworld version 1.5 or earlier, as it could lead to unauthorized access or data manipulation. Organizations using this software should prioritize patching or mitigating this vulnerability to safeguard their systems against exploitation.
Original NVD Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.5.