EIP-2026-105815

The exploit demonstrates a cross-site scripting (XSS) vulnerability in ChatLakTurk PHP Botlu Video by injecting arbitrary script code via the 'ara' parameter in ara.php. The lack of input sanitization allows attackers to execute malicious scripts in the context of the affected site.