EIP-2026-110694

The provided text describes a cross-site scripting (XSS) vulnerability in PHP F1 Max's Photo Album due to insufficient sanitization of user-supplied data. The vulnerability allows arbitrary script execution in the context of the affected site, potentially leading to credential theft or other attacks.