EIP-2026-105405

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Basic CMS by injecting a script tag into the 'q' parameter of the index.php page. The vulnerability arises due to insufficient sanitization of user-supplied input.