EPSS
Percentile
44.0%
The plugin does not validate files to be downloaded, which could allow high privilege users such as admin to access arbitrary files from the server