EIP-2026-108754

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the Joomulus component for Joomla! by injecting malicious JavaScript into the 'tagcloud' parameter of the tagcloud.swf file. The payload executes arbitrary script code in the context of the affected site, potentially stealing cookie-based authentication credentials.