Joomla! Jtag Members Directory 5.3.7 is vulnerable to local file inclusion via the download_file parameter.
View the template here CVE-2018-6008.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-6008.yaml
References: