EIP-2026-106807

This exploit demonstrates a cross-site scripting (XSS) vulnerability in eGroupware 1.8.001 by injecting arbitrary JavaScript code via the 'lang' parameter in the test.php file. The PoC uses a simple alert(0) payload to confirm the vulnerability.