Administrator-level log deletion via path traversal

Arbitrary file deletion in Export and Import Users and Customers 2.6.2 and earlier allows remote authenticated users to delete server log files. The admin_log_page function accepts wt_iew_log_file from a GET request, preserves traversal sequences during text sanitization, appends the value to the log directory, and passes the resulting .log path to unlink. Administrator-level access and a valid nonce are required, and deletion is limited to existing .log files reachable and writable by the PHP process.