EIP-2026-109882

The exploit demonstrates a reflected XSS vulnerability in netjukebox by injecting a malicious script via the 'skin' parameter in the URL. The payload bypasses input sanitization and executes arbitrary JavaScript in the context of the affected site.