EIP-2026-105860

This is a writeup describing a cross-site scripting (XSS) vulnerability in CityPost Image Cropper/Resizer. The vulnerability arises from insufficient input sanitization in the 'image-editor-52.php' script, allowing arbitrary script execution in a user's browser.