EIP-2026-104279

This is a technical writeup detailing a stored XSS vulnerability in iboss Secure Web Gateway. The vulnerability allows an attacker to inject malicious JavaScript into the 'redirectUrl' parameter of a login request, which is then stored and executed when the login page is accessed.