EIP-2026-110663

The exploit demonstrates a reflected XSS vulnerability in PHP City Portal 1.3 by injecting a malicious script via the 'page' parameter in the URL. The payload bypasses input sanitization and executes arbitrary JavaScript in the context of the affected site.