EIP-2026-100226

The provided text describes a cross-site scripting (XSS) vulnerability in Community Server 2007 and 2008, where insufficient sanitization of user-supplied input in the 'TagEditor' parameter allows arbitrary script execution. The writeup includes a proof-of-concept URL demonstrating the vulnerability.