EIP-2026-109127

This exploit targets multiple vulnerabilities in Light Blog, including authentication bypass, arbitrary file deletion, and XSS. It allows an attacker to create posts without authentication, deface the blog via XSS, or delete critical files like blog.php.