EIP-2026-104534

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess by injecting malicious CSS via the User.Id parameter. The payload uses Mozilla's -moz-binding to execute arbitrary code in the context of the affected website.