EIP-2026-107665

The provided text describes a cross-site scripting (XSS) vulnerability in html-edit CMS 3.1.9, where insufficient sanitization of user-supplied data allows arbitrary script execution in the context of the affected site. The vulnerability is triggered via the 'html_output' parameter in the image_slider addon.