EIP-2026-112735

The exploit demonstrates an HTTP response splitting vulnerability and multiple XSS vulnerabilities in Toko LiteCMS 1.5.2 due to improper input sanitization. The PoC includes a crafted HTML form to trigger XSS via POST parameters and highlights insecure header manipulation in edit.php.