EIP-2026-105992

The exploit demonstrates a reflected XSS vulnerability in CMS Mini 0.2.2 by injecting malicious JavaScript via the 'path' parameter. The payload bypasses input sanitization and executes arbitrary script code in the context of the affected site.