EIP-2026-110932

The provided text describes a cross-site scripting (XSS) vulnerability in phPay version 2.02, where user-supplied input is not sufficiently sanitized. An attacker can craft a malicious link to execute arbitrary script code in the context of a legitimate user's browser session.