EIP-2026-109054

The exploit demonstrates a reflected XSS vulnerability in Kusaba X by injecting a malicious script via the 'id' parameter in the 'animation.php' endpoint. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to session hijacking or other client-side attacks.