CVE-2026-54065

Path Traversal to Arbitrary File Deletion in the Edit Comment admin function. An authenticated administrator can delete arbitrary files within the application root e.g., "config.php" by injecting a crafted "attach" parameter, rendering the application inoperable...