EIP-2026-105672

This exploit demonstrates a cross-site scripting (XSS) vulnerability in C99Shell 1.0 pre-release build 16. The vulnerability arises from insufficient sanitization of user-supplied input in the 'directory' parameter, allowing arbitrary script execution in the context of the affected site.