EIP-2026-104924

The code describes a remote file-include vulnerability in ActiveCampaign KnowledgeBuilder due to insufficient sanitization of user-supplied data. The vulnerability allows an attacker to include remote files via the 'visEdit_root' parameter in 'visEdit_control.class.php'.