EIP-2026-108952

This exploit demonstrates a cross-site scripting (XSS) vulnerability in k2News Management due to insufficient sanitization of user-supplied input. The PoC shows how an attacker can inject malicious JavaScript code via the 'errcode' parameter to steal cookie-based authentication credentials.