This vulnerability in Mikado-Themes Kastell (<= 2.0) is a path traversal flaw categorized under CWE-35. It allows unauthenticated attackers to perform local file inclusion by exploiting input containing path traversal sequences such as '.../...//'. The CVSS 3.1 score is 8.1, indicating high impact with network attack vector, high attack complexity, no privileges required, no user interaction, and full confidentiality, integrity, and availability impact. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

Successful exploitation can lead to local file inclusion, potentially exposing sensitive files and allowing attackers to execute arbitrary code or disrupt service, resulting in full compromise of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to vulnerable installations and monitor for suspicious activity related to file inclusion attempts.