EIP-2026-106207

This exploit demonstrates a cross-site scripting (XSS) vulnerability in cPanel by injecting malicious JavaScript into the 'file' parameter of the 'select.html' page. The payload executes arbitrary script code in the context of the affected site, potentially stealing cookie-based authentication credentials.