EIP-2026-105411

This exploit demonstrates multiple local file inclusion (LFI) and cross-site scripting (XSS) vulnerabilities in Batavi 1.0. The LFI vulnerabilities allow directory traversal to access local files, while the XSS vulnerabilities enable arbitrary script execution in the context of the affected site.