EIP-2026-102367

This exploit demonstrates a cross-site scripting (XSS) vulnerability in EJBCA by injecting a malicious script into the 'issuer' parameter of a URL. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.