FlatPress version 1.3.1 suffers from a path traversal vulnerability.