EIP-2026-112157

The exploit demonstrates a reflected XSS vulnerability in Simpli Easy Newsletter via the 'do' parameter in cp.php and an information leakage issue where subscriber emails and IPs are stored in a plaintext file (el.txt). Both vulnerabilities are confirmed with proof-of-concept examples.