EIP-2026-102458

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Atlassian JIRA by injecting malicious script tags into the 'requestId' parameter of the IssueNavigator.jspa endpoint. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.