EIP-2026-107847

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Innovate Portal by injecting a crafted script tag into the 'cat' parameter of the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to credential theft or other client-side attacks.