EIP-2026-107589

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Hexjector 1.0.7.2 by injecting an iframe via the 'site' parameter. The vulnerability arises from insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.