EIP-2026-109418

The exploit demonstrates an HTML injection vulnerability in Mensajeitor due to improper input sanitization. The crafted URL injects an iframe via the 'ip' parameter, allowing execution of arbitrary HTML/script code in the context of the affected site.