This vulnerability involves a contributor path traversal issue in WPFunnels Creator LMS versions <= 1.2.19. The flaw allows an attacker with low privileges to exploit directory traversal sequences ('.../...//') to access files outside the intended directory scope. The CVSS 3.1 score is 7.5, indicating high impact on confidentiality, integrity, and availability. No patch or remediation information is provided in the input data.

Successful exploitation can lead to unauthorized access to sensitive files and potentially compromise the confidentiality, integrity, and availability of the affected system. The CVSS vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict contributor privileges and monitor for suspicious file access patterns related to directory traversal attempts.