EIP-2026-107375

The exploit demonstrates a reflected XSS vulnerability in Gekko Web Builder by injecting a malicious script via the 'app' parameter in the admin interface. The PoC URL triggers an alert with the victim's cookies, confirming the vulnerability.