EIP-2026-111425

This exploit demonstrates multiple cross-site scripting (XSS) vulnerabilities in PostNuke by injecting malicious JavaScript into URLs. The PoC shows how arbitrary script code can execute in the context of the affected site, potentially stealing cookie-based authentication credentials.