EIP-2026-106979

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Extreme Mobster by injecting a malicious script via the 'login' parameter in the URL. The script executes arbitrary JavaScript in the context of the affected site, potentially allowing cookie theft or other client-side attacks.