External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.
CWE-73