EIP-2026-100414

The provided text describes a cross-site scripting (XSS) vulnerability in MaviPortal, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'a_r_a_n_a_c_a_k' parameter in 'arama.asp'.