This vulnerability in themezaa Litho (<= 3.0) involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. It allows an attacker to manipulate file paths to access or affect files outside the designated directory boundaries. The CVSS 3.1 score is 8.6, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact affects availability but not confidentiality or integrity. No patch or official fix information is provided in the available data.

The vulnerability can lead to disruption of service or denial of availability (availability impact is high). There is no direct impact on confidentiality or integrity according to the CVSS vector. No known exploits have been reported in the wild, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor themezaa's official channels for updates. Until a fix is available, consider restricting access to vulnerable components and applying any available workarounds recommended by the vendor.