EIP-2026-104379

This is a proof-of-concept for multiple cross-site scripting (XSS) vulnerabilities in Oracle OpenSSO 8.0. The exploit demonstrates POST injection via several parameters in two different endpoints, triggering arbitrary JavaScript execution in the context of the affected site.