CVE-2020-13792

PlayTube 1.8 allows disclosure of user details via ajax.php?type=../admin-panel/autoload=manage-users directory traversal, aka local file inclusion...