EIP-2026-105522

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Blog Torrent's btdownload.php file. The vulnerability arises from insufficient sanitization of user-supplied URI input, allowing arbitrary JavaScript execution in the context of the victim's browser.