EIP-2026-104889

The exploit demonstrates a reflected XSS vulnerability in AbleSpace 1.0 and earlier by injecting a malicious script via the 'find_str' parameter in the 'adv_cat.php' endpoint. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to credential theft or further attacks.