EIP-2026-110315

The exploit demonstrates a reflected XSS vulnerability in openQRM 4.8 by injecting a script tag into the 'source_tab' parameter of the zfs-storage-action.php endpoint. The payload executes arbitrary JavaScript in the context of the affected site.