A path traversal vulnerability exists in the create function of the vlife-base component of wwwlike vlife up to version 2.0.1. This vulnerability allows remote attackers to manipulate the fileName argument to access unauthorized file system paths. The vulnerability has a CVSS score of 5.3 (medium severity) and public exploit details have been disclosed, though no known exploits in the wild are reported.