EIP-2026-104015

The exploit demonstrates a cross-site scripting (XSS) and connection proxy vulnerability in OpenWFE. The XSS payload is embedded in an RMI URL, while the proxy issue allows scanning arbitrary network hosts via RMI connections.