BcThemeFile Plugin (5.2.3 Before 5.3.2, 5.4.0 Before 5.4.2)

A path traversal vulnerability exists in the BcThemeFile plugin for baserCMS where percent-encoded traversal sequences bypass validation, allowing an authenticated administrator to write PHP files outside the intended theme directory.