EIP-2026-109336

The code describes a remote file inclusion vulnerability in Kontakt Formular 1.4 due to insufficient sanitization of user-supplied data in the 'root_path' parameter. Exploitation could allow arbitrary code execution or other attacks.