This vulnerability in Stylemix Motors (up to version 1.4.71) arises from improper validation of filenames used in PHP include or require statements, resulting in a Local File Inclusion issue. An attacker can exploit this flaw to include arbitrary local files on the server, which may lead to information disclosure or code execution. The CVSS v3.1 base score is 8.1, indicating a high severity with network attack vector, high impact on confidentiality, integrity, and availability, and no required privileges or user interaction. No patch or official fix has been published yet, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to full compromise of the affected system by allowing attackers to include and execute local files. This can result in disclosure of sensitive data, modification of application behavior, or denial of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability without requiring authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying temporary mitigations such as restricting file inclusion paths via server configuration or disabling vulnerable functionality if feasible. Monitoring for unusual file inclusion attempts may help detect exploitation attempts.