EIP-2026-100748

The exploit demonstrates multiple XSS vulnerabilities in AxisInternet VoIP Manager by injecting malicious iframe payloads into URL parameters. The payloads execute arbitrary JavaScript in the context of the affected site, allowing credential theft or further attacks.