EIP-2026-110980

The provided text describes a cross-site scripting (XSS) vulnerability in Photo Album software, where user-supplied input is not properly sanitized. The example URL demonstrates an XSS payload that executes arbitrary JavaScript in the context of a victim's browser.