EIP-2026-100637

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Ziggurat Farsi CMS by injecting a malicious script tag into the 'id' parameter of the 'index.asp' page. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.