EIP-2026-106280

This is a functional HTML injection exploit for Elgg 1.0, leveraging improper input sanitization to execute arbitrary HTML and script code in the context of the affected browser. The exploit requires the attacker to be an authenticated user and targets the user details update functionality.