CVE-2024-12859 | PX-lab BoomBox Theme Extensions up to 1.8.0 on WordPress Shortcode boombox_listing type filename control

A vulnerability classified as problematic was found in PX-lab BoomBox Theme Extensions up to 1.8.0 on WordPress. This vulnerability affects the function boombox_listing of the component Shortcode Handler. The manipulation of the argument type leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability was named CVE-2024-12859. Attacking locally is a requirement. There is no exploit available.