EIP-2026-108598

This exploit targets a remote code execution vulnerability in the Joomla component com_xcloner-backupandrestore. It leverages improper input validation in the XCloner.php script to overwrite the configuration.php file with malicious code via the 'output_url_pref' parameter.