EIP-2026-102398

The exploit demonstrates a reflected XSS vulnerability in Mac's CMS 1.1.4 by injecting a malicious script via the 'searchString' parameter in the URL. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.