EIP-2026-110855

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the PHP-Nuke 'News' module by injecting malicious JavaScript via the 'title' parameter. The payload executes arbitrary script code in the context of the victim's browser session.