🚨 CVE-2026-22325
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.