EIP-2026-112129

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Simple PHP Blog 0.5.11 by injecting arbitrary HTML/JavaScript via the 'q' parameter in search.php. The PoC shows a basic HTML injection to display a message, confirming the lack of input sanitization.