EIP-2026-107222

The exploit demonstrates multiple vulnerabilities in Free Simple CMS 1.0, including XSS via unsanitized URL input and GET parameters, and LFI via directory traversal. The PoC URLs are functional and directly exploit the vulnerabilities.