EIP-2026-110230

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Open Flash Chart by injecting a JavaScript payload via the 'get-data' parameter in the SWF file URL. The payload executes arbitrary script code in the context of the affected site, potentially stealing cookies or performing other malicious actions.