Booked Scheduler Directory Traversal Vulnerability in manage_email_templates.php

A directory traversal vulnerability has been identified in Booked Scheduler version 2.7.7, specifically within the manage_email_templates.php script. This vulnerability allows authenticated administrators to access unauthorized files by exploiting the 'tn' parameter and manipulating directory path traversal techniques.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Reproduction

To reproduce this vulnerability, an authenticated administrator can send a GET request to the manage_email_templates.php script, including the vulnerable 'tn' parameter. The request should be made with the appropriate session cookie to maintain authentication.