EIP-2026-111162

The exploit demonstrates XSS vulnerabilities in PHPMyFAQ by injecting arbitrary JavaScript via unsanitized input parameters in footer.php and header.php. The PoC uses script tags to trigger an alert with document.cookie, confirming the vulnerability.