EIP-2026-110869

This exploit demonstrates a cross-site scripting (XSS) vulnerability in PHP-Nuke 8.0 by injecting a malicious script into the 'query' parameter of the Downloads module. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.