CVE-2017-20289

The Broadstreet Ad Widget plugin for WordPress (versions 2.2.0 before 2.12.0) is vulnerable to a local file inclusion (LFI) vulnerability. The issue stems from unsanitized input being passed to a require statement in views/modal/index.php. Specifically, an authenticated user can supply directory ...