EIP-2026-107807

This is a functional HTML injection (XSS) exploit for ImpressCMS 1.2.3 Final. It demonstrates how unsanitized user input in the 'quicksearch_ContentContent' parameter can execute arbitrary JavaScript, leading to cookie theft or other client-side attacks.