EIP-2026-100357

The exploit demonstrates a reflected XSS vulnerability in i-Gallery 3.4 by injecting a malicious script via the 'd' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to credential theft or further attacks.