EIP-2026-104178

The exploit demonstrates a cross-site scripting (XSS) vulnerability in B-Cumulus by injecting malicious JavaScript via the 'tagcloud' parameter in SWF files. The payload executes arbitrary script code in the context of the affected site, potentially stealing cookies.