EIP-2026-110537

The exploit describes an HTML injection vulnerability in PECL Alternative PHP Cache (APC) due to improper input sanitization. Attackers with local write access can create directories and files with malicious names to trigger XSS when accessed via HTTP.