EIP-2026-104900

This is a writeup describing a cross-site scripting (XSS) vulnerability in ACal 2.2.6. The vulnerability allows arbitrary script execution in the context of the affected site due to improper input sanitization.