EIP-2026-105902

The provided text describes an HTML injection vulnerability in Clever Copy, where user-supplied input is not properly sanitized, allowing execution of arbitrary HTML and script code. The example demonstrates how an attacker could inject malicious content via HTTP headers like Referer and X-Forwarded-For.