EIP-2026-106439

The exploit demonstrates a cross-site scripting (XSS) and directory traversal vulnerability in DieselPay 1.6 by providing example URIs that inject malicious scripts and access sensitive files. The lack of input sanitization allows arbitrary script execution and file disclosure.