CVE-2018-16457: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/templatedpdec2015/img directory...