EIP-2026-107380

The exploit demonstrates a cross-site scripting (XSS) vulnerability in GenPortal by injecting arbitrary script code via the 'palBuscar' parameter in the 'buscarCat.php' endpoint. The lack of input sanitization allows attackers to execute malicious scripts in the context of the affected site.