Description
This script is possibly vulnerable to directory traversal attacks.
Directory Traversal is a vulnerability which allows attackers to access restricted directories and read files outside of the web server's root directory.
Remediation
Your script should filter metacharacters from user input.
References
Related Vulnerabilities
WordPress Plugin WP Source Control Directory Traversal (3.0.0)
WordPress Plugin Zedna eBook download Directory Traversal (1.1)
Drupal Core 8.x.x Directory Traversal (8.0.0 - 8.5.15)
WordPress Plugin Cross-RSS Directory Traversal (1.7)
WordPress Plugin SAM Pro (Free Edition) Local File Inclusion (1.9.6.67)