EIP-2026-105185

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Annuaire 1Two by injecting a malicious script via the 'id' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other client-side attacks.