EIP-2026-104390

This is a functional proof-of-concept for a reflected XSS vulnerability in Pentaho BI. The exploit demonstrates how an attacker can inject arbitrary JavaScript code via the 'outputType' parameter, which is then executed in the context of the victim's browser session.