Threats affecting pkg:github/evoluted/php-directory-listing-script

Evoluted PHP Directory Listing Script versions up to and including 4.0.5 contain a reflected cross-site scripting (XSS) vulnerability. The vulnerability occurs in index.php where the dir parameter is reflected without proper HTML encoding in the page title and breadcrumb navigation anchor href attributes. This allows attackers to inject arbitrary JavaScript that executes in the context of a victim's browser. The CVSS 4.0 base score is 5.1, indicating a medium severity level. No official patch or remediation guidance is currently available from the vendor.