EIP-2026-100750

The exploit demonstrates a cross-site scripting (XSS) vulnerability in BackupPC by providing crafted URLs that inject arbitrary JavaScript code. The vulnerability arises from insufficient sanitization of user-supplied input in the 'host', 'num', 'share', and 'dir' parameters.