EIP-2026-109329

This exploit demonstrates multiple cross-site scripting (XSS) vulnerabilities in Thefacebook by injecting malicious JavaScript into URI parameters. The PoC shows how an attacker could steal cookie-based authentication credentials by tricking a victim into clicking a crafted link.