EIP-2026-100937

This exploit demonstrates a cross-site scripting (XSS) vulnerability in the ext.dll ISAPI filter. It leverages insufficient input sanitization to inject malicious JavaScript code, which executes in the context of a victim's browser when they visit a crafted URL.