EIP-2026-111414

The advisory details multiple vulnerabilities in Portili Personal and Team Wiki <= 1.14, including admin password disclosure via directory traversal, unauthenticated file upload in FCKeditor, information leakage via phpinfo.php, and XSS in ajaxfilemanager.php. No functional exploit code is provided, only descriptions and PoC URLs.