EIP-2026-107394

The code describes a local file inclusion (LFI) vulnerability in GetSimple CMS 3.1.2, where unsanitized user input in the 'path' parameter of 'filebrowser.php' allows arbitrary file access. The advisory lacks exploit code but provides technical details about the vulnerability and its impact.