EIP-2026-107047

This exploit demonstrates a cross-site scripting (XSS) vulnerability in FanUpdate 3.0 due to improper input sanitization. The provided URL injects arbitrary JavaScript code into the 'pageTitle' parameter, which executes in the context of the affected site.