EIP-2026-100403

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Mailtraq by manipulating the 'cfolder' parameter in the browse.asp script. The provided URL injects a simple JavaScript alert to steal cookies, confirming the lack of input sanitization.