EIP-2026-106075

The exploit demonstrates multiple vulnerabilities in Cometchat, including remote code execution via `call_user_func` with user-controlled input and reflected XSS in two plugins. The PoC provides direct URLs to trigger these vulnerabilities.