EIP-2026-100363

This exploit demonstrates a cross-site scripting (XSS) vulnerability in IBM ENOVIA SmarTeam due to improper input sanitization. The PoC shows how an attacker can inject arbitrary JavaScript code via the 'errMsg' parameter in the login page URL.