EIP-2026-107185

The exploit demonstrates multiple reflected XSS vulnerabilities in Fork CMS 3.1.5 by injecting malicious scripts via unsanitized URL parameters. The PoC includes specific payloads targeting various endpoints, confirming the vulnerability's existence.