EIP-2026-109780

This exploit demonstrates a cross-site scripting (XSS) vulnerability in myPHPNuke due to inadequate HTML filtering. The PoC provides malicious URLs that execute arbitrary JavaScript in the context of the victim's browser, potentially stealing cookie-based authentication credentials.