EIP-2026-101174

This exploit demonstrates persistent HTML injection vulnerabilities in Barracuda Email Security Service. It shows how an attacker can inject malicious HTML and script code into the 'Directory Services' and 'Reports' modules, potentially leading to cookie theft or rendering control.