EIP-2026-108921

The exploit demonstrates a reflected XSS vulnerability in Joostina by injecting malicious JavaScript via the 'ordering' parameter in a search query. The payload triggers an alert with the user's cookies when the mouse hovers over the affected page element.