EIP-2026-103914

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Google Desktop Search by injecting arbitrary script code via a malformed search query parameter. The payload is embedded in the 'meta' parameter, bypassing sanitization and executing in the user's browser context.