EIP-2026-106523

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in Dolibarr 3.0.0 via path traversal in the 'theme' parameter, allowing arbitrary file inclusion. It also includes a Reflected Cross-Site Scripting (XSS) PoC via the 'lang' parameter.