EIP-2026-105338

The exploit demonstrates a cross-site scripting (XSS) vulnerability in AWStats by providing crafted URLs that inject malicious JavaScript code via the 'url' and 'key' parameters in 'awredir.pl'. The payload executes arbitrary script code in the context of the affected site.