EIP-2026-102418

This exploit demonstrates a cross-site scripting (XSS) vulnerability in PRTG Traffic Grapher by injecting a script tag into the 'url' parameter of the login page. The PoC uses a simple alert to display the user's cookies, proving arbitrary JavaScript execution.