Update plugin_vulns.xml

Adding the full path disclosure in "aryo-activity-log" plugin; it was fixed 3 days ago.
Merge pull request #412 from nashe/patch-2

Fix 412. aryo-activity-log vulnerability