EIP-2026-106541

The exploit demonstrates two vulnerabilities in Doodle4Gift: a reflected XSS via the 'profile' parameter and an information disclosure flaw exposing user credentials in an XML file. Both are trivial to exploit and require no authentication.