EIP-2026-111651

The provided text describes a local file inclusion (LFI) vulnerability in QuiXplorer 2.4.1beta due to insufficient sanitization of user-supplied input in the 'lang' parameter. Exploitation could allow an attacker to include arbitrary files, potentially leading to remote code execution or information disclosure.