EIP-2026-102387

This exploit demonstrates a cross-site scripting (XSS) vulnerability in JOnAS 4.10.3 by injecting malicious script tags into the 'select' parameter of the 'ListMBeanDetails.do' endpoint. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.