EIP-2026-111168

This exploit demonstrates an HTML injection vulnerability in phpMyRecipes 1.2.2 by injecting malicious script tags into the 'r_name' and 'r_instructions' parameters of a POST request to /recipes/addrecipe.php. The vulnerability allows arbitrary JavaScript execution in the context of the affected site.