EIP-2026-104265

The exploit demonstrates an HTML injection vulnerability in Gitea 1.24.0 via the 'description' parameter in the user settings page. The provided HTTP request shows how unsanitized HTML input is rendered, confirming the vulnerability.