EIP-2026-102366

The provided text describes a cross-site scripting (XSS) vulnerability in dotDefender 4.02, where user-supplied input is not properly sanitized. The example URI demonstrates how an attacker could inject arbitrary script code via the 'clave' parameter.