EIP-2026-109010

The exploit demonstrates a cross-site scripting (XSS) vulnerability in KindEditor by injecting a malicious script via the 'name' parameter. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to credential theft or other attacks.