EIP-2026-109189

The exploit demonstrates a cross-site scripting (XSS) vulnerability in LiveZilla by injecting malicious JavaScript via the 'lat' parameter in the 'map.php' file. The payload bypasses input sanitization and executes arbitrary script code in the context of the affected site.