EIP-2026-105761

The provided text describes a cross-site scripting (XSS) vulnerability in Resin Professional 4.0.36, where user-supplied input is not properly sanitized. The example URL demonstrates a reflected XSS payload that executes arbitrary JavaScript in the context of the affected site.