EIP-2026-107544

This exploit demonstrates a cross-site scripting (XSS) vulnerability in H-Sphere WebShell by injecting arbitrary JavaScript code via the 'login' parameter in the login.php page. The PoC uses a simple alert to display the user's cookies, proving the vulnerability.