EIP-2026-104252

The exploit describes an HTML injection vulnerability in FLEX 1085 Web 1.6.0, where arbitrary HTML code can be injected via the WiFi network name field. The vulnerability is demonstrated by creating a WiFi network with an HTML tag in its name, which is then rendered in the device's dashboard.