EIP-2026-110008

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Obsession-Design Image-Gallery 1.1 by injecting a script tag into the 'folder' parameter of the display.php file. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.