EIP-2026-106581

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Drupal by crafting malicious URLs that inject arbitrary JavaScript code. The PoC shows how an attacker can execute scripts in the context of a victim's browser session.