Input validation vulnerability in WP-Appbox 4.3.17

The WP-Appbox plugin for WordPress is vulnerable to a security risk called Local File Inclusion. This vulnerability affects all versions of the plugin up to and including version 4.3.17. It allows an attacker who is already authenticated to include and execute a malicious file from the server. This malicious file can contain any type of code, including code that can bypass access controls, steal sensitive data, or execute commands on the server. This vulnerability is especially dangerous because it can be exploited even if the server only allows images and other seemingly harmless file types to be uploaded.