EIP-2026-107360

This is a writeup describing a cross-site scripting (XSS) vulnerability in Geeklog due to insufficient sanitization of HTML attributes in user-supplied input. The example demonstrates how an attacker could inject malicious JavaScript via an onMouseOver event.