EIP-2026-109305

The provided text describes a cross-site scripting (XSS) vulnerability in the Mambo 'index.php' script due to improper validation of user-supplied URI input. The vulnerability allows an attacker to craft a malicious link that executes arbitrary script code in the context of a victim's browser.