EIP-2026-110528

This advisory details multiple client-side cross-site scripting (XSS) vulnerabilities in pdirl PHP Directory Listing 1.0.4, including proof-of-concept (PoC) exploit URLs. The vulnerabilities allow remote attackers to inject malicious scripts via GET parameters, leading to session hijacking or phishing.