CVE-2016-20101

The Issuu Panel plugin for WordPress (versions prior to 1.6.6 ) is vulnerable to a PHP file inclusion vulnerability. An unauthenticated attacker can exploit the abspath parameter via a GET request to menu/documento/requests/ajax-docs.php. By providing a crafted value, the attacker can trigger the...