EIP-2026-105880

The provided text describes a cross-site scripting (XSS) vulnerability in ClarkConnect Linux 5.0, where the proxy.php script fails to sanitize user-supplied input in the 'url' parameter. An attacker can exploit this to execute arbitrary JavaScript in the context of the affected site.