EIP-2026-104223

This exploit demonstrates a cross-site scripting (XSS) vulnerability in DirectAdmin by injecting arbitrary JavaScript code via the 'name' parameter in the CMD_DB_VIEW endpoint. The vulnerability arises due to insufficient input sanitization.