The FoF Pretty Mail extension version 1.1.2 for Flarum suffers from a local file inclusion vulnerability.