The debounce DeBounce Email Validator up to version 5.7 contains a PHP Local File Inclusion vulnerability due to improper control of filenames in include/require statements. This allows an attacker to manipulate the file path used in these statements, potentially leading to arbitrary code execution or information disclosure by including unintended local files. The vulnerability is remotely exploitable over the network but requires high attack complexity and user interaction. It does not affect cloud services and no patch or vendor advisory is currently available.

Successful exploitation could result in an attacker executing arbitrary code or accessing sensitive files on the affected system, compromising confidentiality, integrity, and availability. Given the high CVSS score (7.5), the impact is significant but exploitation complexity is high and requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the vulnerable application, applying web application firewalls to detect and block suspicious include/require requests, and avoid exposing the application to untrusted users. Monitor vendor channels for updates and patches.