EIP-2026-100857

The exploit demonstrates a cross-site scripting (XSS) vulnerability in MetaDot Portal Server by injecting an iframe via the 'op' parameter in the userchannel.pl script. The lack of input validation allows arbitrary HTML/JS execution in the context of the victim's session.