EIP-2026-111108

The exploit demonstrates a cross-site scripting (XSS) vulnerability in phpLDAPadmin by injecting malicious JavaScript via the 'server_id' parameter in 'cmd.php' and 'index.php'. The vulnerability arises due to insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.