EIP-2026-100577

The exploit describes an HTML injection vulnerability in Synkron.web's search script due to insufficient input sanitization. Attackers can inject malicious HTML or script code, which may be echoed back to users viewing cached search pages, potentially leading to cookie-based credential theft.