Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read

<p>Posted by Ron E on Sep 03</p>Description<br /> <br /> Flextype CMS v1.0.0-alpha.3 contains an arbitrary file-read vulnerability<br /> in its stored shortcode processing functionality. Attacker-controlled entry<br /> fields are automatically processed by the shortcode parser when global<br /> shortcode processing is enabled.<br /> <br /> The built-in filesystem shortcode accepts a file path and