EIP-2026-112219

The code describes a remote file inclusion vulnerability in Small Axe Weblog 0.3.1 due to improper input sanitization. An attacker can exploit this to execute arbitrary PHP code by including a remote file via the 'ffile' parameter.