EIP-2026-110981

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Photo Album by injecting arbitrary script code via the 'sid' parameter in the URL. The payload executes an alert with the document cookie, proving the vulnerability.