EIP-2026-106916

The exploit demonstrates a reflected XSS vulnerability in eSyndiCat Directory Software by injecting malicious script tags via the 'preview' parameter. The PoC includes a simple alert-based payload and a meta-refresh redirect, confirming the lack of input sanitization.