EIP-2026-107714

The provided text describes a cross-site scripting (XSS) vulnerability in IBSng, where user-supplied input is not properly sanitized. An attacker can exploit this by crafting a malicious URL to execute arbitrary script code in the context of the affected site.