EIP-2026-106360

The exploit demonstrates a reflected XSS vulnerability in Dataface 1.0 by injecting a malicious script via the `-search` parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.