EIP-2026-104251

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Flash Tag Cloud widget and MT-Cumulus Plugin by injecting malicious JavaScript via the 'tagcloud' parameter in the SWF file URL. The payload executes arbitrary script code in the context of the affected site, potentially stealing cookie-based authentication credentials.