EIP-2026-114400

This exploit demonstrates an arbitrary file download vulnerability in WYSIWYG HTML Editor PRO 1.0 due to improper handling of base64-decoded user input in the 'id' parameter. The PoC shows how an attacker can download sensitive files by encoding the file path in base64.