EIP-2026-102403

This exploit demonstrates a reflected XSS vulnerability in ManageEngine Desktop Central 10.0.271 via the 'Features & Articles' search field. The crafted HTTP POST request injects malicious JavaScript into the 'q' parameter, triggering an alert popup when processed by the server.