EIP-2026-107713

The exploit demonstrates a reflected XSS vulnerability in IBS 0.15 by injecting a malicious script into the 'username' parameter of the login page. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other client-side attacks.