EIP-2026-107586

This exploit demonstrates multiple reflected XSS vulnerabilities in HESK 2.2 by injecting malicious JavaScript via unsanitized user-supplied input in various parameters across multiple endpoints. The PoC uses URL-encoded script tags to execute arbitrary JavaScript in the context of the affected site.