EIP-2026-108066

The exploit demonstrates a cross-site scripting (XSS) vulnerability in JBC Explorer by injecting malicious JavaScript via the 'last' parameter in the URL. The payload executes an alert with the document cookie, proving arbitrary script execution in the context of the affected site.