EIP-2026-110842

This exploit demonstrates multiple XSS vulnerabilities in PHP-Nuke by injecting malicious scripts that exfiltrate cookies and document URLs to a remote server. The PoC includes various attack vectors such as script tags, CSS expressions, and event handlers.