EIP-2026-105881

The provided code demonstrates an HTML injection vulnerability in Claroline 1.10, where user-supplied input is not properly sanitized, allowing arbitrary script execution in the context of the affected browser. The PoC includes a simple XSS payload (`"><script>alert(0)</script>`) that triggers an alert dialog.