EIP-2026-111057

This exploit demonstrates a cross-site scripting (XSS) vulnerability in phpFreeChat 1.1 by injecting a malicious script tag into a URL parameter. The PoC triggers an alert box displaying the user's cookies, confirming the vulnerability.