EIP-2026-107078

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Form Sender due to improper sanitization of user-supplied URI input. The PoC shows how an attacker can inject malicious JavaScript code to steal cookie-based authentication credentials.