lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.