EIP-2026-105325

This exploit demonstrates XSS and HTML injection vulnerabilities in AV Arcade's search field. The PoC provides example payloads that can be injected via the 'q' parameter in the search task, leading to arbitrary script execution or HTML rendering.