• This script is possibly vulnerable to directory traversal attacks.
  
  Directory Traversal is a vulnerability which allows attackers to access restricted directories and read files outside of the web server's root directory.

• Your script should filter metacharacters from user input.

• • Acunetix Directory Traversal Attacks

• 

• CWE-22

• CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

• Directory Traversal

• WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)
• WordPress Plugin myEASYbackup 'dwn_file' Parameter Directory Traversal (1.0.8.1)
• WordPress Plugin DB Backup Directory Traversal (4.5)
• WordPress Plugin GRAND Flash Album Gallery SQL Injection and Information Disclosure Vulnerabilities (0.59)
• WordPress Plugin A Page Flip Book 'pageflipbook_language' Parameter Local File Include (2.3)