EIP-2026-110454

The exploit demonstrates a reflected XSS vulnerability in Pandora FMS by injecting a malicious script via the 'search' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to session hijacking or other client-side attacks.