EIP-2026-100230

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Corda .NET Redirector by injecting arbitrary script code via unsanitized user input in the URL. The PoC shows how an attacker can execute JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.