EIP-2026-102373

This exploit demonstrates multiple cross-site scripting (XSS) vulnerabilities in H-Sphere's Hosting Control Panel. The vulnerabilities arise from improper filtering of HTML and script code in template-related parameters, allowing arbitrary script execution in the context of a logged-in user's session.