EIP-2026-100200

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Citrix MetaFrame Web Manager by injecting a malicious script via the NFuse_Message parameter in the login page URL. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.