This vulnerability in Mikado-Themes Evently arises from improper validation of filenames used in PHP include or require statements, leading to PHP Local File Inclusion. It affects Evently versions up to and including 1.7. The vulnerability can be exploited remotely over the network without authentication but requires high attack complexity. Successful exploitation could result in full compromise of the affected system's confidentiality, integrity, and availability. No vendor advisory or patch information is available at this time.

An attacker can exploit this vulnerability to include local files on the server, potentially leading to disclosure of sensitive information, code execution, and full system compromise. The CVSS score of 8.1 reflects high impact on confidentiality, integrity, and availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting the vulnerable functionality if possible and monitor for updates from Mikado-Themes.