EIP-2026-112086

The provided text describes a cross-site scripting (XSS) vulnerability in Simple Directory Listing 2.1, where user-supplied input is not properly sanitized. The example demonstrates an XSS payload injected via the 'cwdRelPath' parameter.