CVE-2018-12494: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.html?path=../ URI...