EIP-2026-105988

This exploit leverages an authenticated RCE vulnerability in CMS Made Simple 2.2.15 via the 'editusertag.php' file, where user input is passed to an eval() function. The PoC demonstrates command execution by injecting a reverse shell payload into a User Defined Tag.