EIP-2026-106593

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the Cumulus module for Drupal by injecting malicious JavaScript via the 'tagcloud' parameter in the SWF file URL. The payload executes arbitrary script code in the context of the affected site, potentially stealing cookies or performing other malicious actions.