EIP-2026-109771

The exploit demonstrates a cross-site scripting (XSS) vulnerability in MyMail's login.php by injecting arbitrary script code via the 'error' parameter. The lack of input sanitization allows execution of malicious scripts in the context of the affected site.