EIP-2026-105063

The exploit demonstrates a reflected XSS vulnerability in AL-Caricatier 2.5 due to improper input sanitization in the 'CatName' parameter. The PoC includes crafted URLs that inject arbitrary JavaScript code, which executes in the context of the affected site.