EIP-2026-105662

The exploit demonstrates a reflected XSS vulnerability in ButorWiki 3.0.0 by injecting a malicious script via the 'service' parameter in the SSO sign-in URL. The payload executes arbitrary JavaScript in the context of the affected site.