EIP-2026-106078

The exploit demonstrates a reflected XSS vulnerability in Commentics 2.0 by injecting a malicious script into the 'id' parameter of the edit_page endpoint. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.