Pagesetter "pagesetter_file_preview()" Function Remote Directory Traversal Vulnerability
Description
A vulnerability has been identified in Pagesetter, which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system. This issue is due to an input validation error in the "pagesetter_file_preview()" [pnfile.php] function that does not validate user-supplied parameters (e.g. "id") before being passed to a "readfile()" call, which could be exploited by attackers to access and read the contents of arbitrary files.