EIP-2026-105409

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Basit's Search module due to insufficient input sanitization. The crafted URL injects malicious JavaScript via the 'q' parameter, allowing execution of arbitrary code in the context of the victim's browser.