EIP-2026-105341

The provided text describes cross-site scripting (XSS) and arbitrary file upload vulnerabilities in AZ Photo Album, with example URLs demonstrating the XSS attack vector. It lacks functional exploit code but provides technical details about the vulnerability.