EIP-2026-105408

The exploit demonstrates a reflected XSS vulnerability in Basilic 1.5.13 by injecting an iframe with an onload event handler via the 'author' parameter. The payload executes arbitrary JavaScript in the context of the affected site.