EIP-2026-104831

The provided text describes a cross-site scripting (XSS) vulnerability in 2z Project 0.9.5, where an attacker can inject malicious scripts via the 'altname' parameter in the URL. No actual exploit code is included, only a description and example URL.