EIP-2026-104986

The exploit demonstrates a reflected XSS vulnerability in YABSoft Advanced Image Hosting Script 2.2 by injecting a malicious script via the 'text' parameter in search.php. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.