CPE
The Grav Lightbox Gallery plugin 1.1.0 before 1.3.2 on Grav 2.x allows page editors to read server-readable files by invoking unauthorized media methods.