EIP-2026-111088

The exploit demonstrates multiple vulnerabilities in Hotel Booking System V3.0, including CSRF for admin creation, XSS via room creation, and LFI for reading arbitrary files. The PoC includes HTML forms and a direct LFI URL.