EIP-2026-106428

This exploit demonstrates a cross-site scripting (XSS) vulnerability in DEV Web Manager System by injecting arbitrary JavaScript code via the 'action' parameter in the URL. The payload bypasses basic sanitization using mixed case and encoding to execute an alert dialog.