EIP-2026-106958

The exploit demonstrates XSS and SQL injection vulnerabilities in exoops by providing crafted URLs that inject malicious scripts or SQL commands. The PoC shows how unsanitized input in parameters like 'sortdays', 'viewcat', and 'artid' can lead to cookie theft or database manipulation.