EIP-2026-105277

The exploit demonstrates multiple XSS (Cross-Site Scripting) and FPD (Full Path Disclosure) vulnerabilities in Atmail Webmail versions >=7.2. It includes detailed request examples and injection points for both reflected and persistent XSS attacks, as well as a path disclosure technique.