This vulnerability in Mikado-Themes FiveStar arises from improper validation of filenames in PHP include/require statements, leading to PHP Local File Inclusion. It affects versions up to and including 1.7. The CVSS 3.1 base score of 8.1 reflects high impact on confidentiality, integrity, and availability, with network attack vector, high attack complexity, no privileges required, and no user interaction needed. The vulnerability could allow an attacker to include local files, potentially leading to code execution or data disclosure.

Successful exploitation can lead to full compromise of the affected system's confidentiality, integrity, and availability. Attackers may execute arbitrary code or access sensitive files via local file inclusion. The high CVSS score confirms the critical nature of the impact. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Mikado-Themes communications for updates. Until a fix is available, consider restricting access to the vulnerable application and applying any recommended temporary mitigations from the vendor.