EIP-2026-114457

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Xoops' mylinks module via the 'myheader.php' script. The PoC shows how an attacker can inject malicious JavaScript code through the 'url' parameter to steal cookie-based authentication credentials.