EIP-2026-100278

The exploit demonstrates a cross-site scripting (XSS) vulnerability in DotNetNuke by injecting an iframe via the 'error' parameter in the ErrorPage.aspx URL. The lack of input sanitization allows arbitrary script execution in the context of the affected site.