EIP-2026-100851

The exploit demonstrates multiple HTML injection vulnerabilities in MegaBook due to insufficient sanitization of user-supplied input. It includes proof-of-concept URLs that inject JavaScript code via the 'password' parameter in the admin.cgi endpoint.