EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php

{
                    "vendor": "icret",
                    "product": "EasyImages2.0",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThanOrEqual": "2.8.6",
                            "versionType": "semver"
                        }
                    ]
                }