EIP-2026-109741

The provided text describes an HTML-injection vulnerability in TagCloud version 2.0, where user-supplied input is not properly sanitized, allowing attacker-supplied HTML and script code to execute in the context of the affected browser. The example input demonstrates a simple XSS payload.