EIP-2026-108189

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the 3D Cloud component for Joomla! by injecting malicious JavaScript into the 'tagcloud' parameter of the tagcloud.swf file. The payload executes arbitrary script code in the context of the affected site, potentially stealing cookie-based authentication credentials.