EIP-2026-111269

The provided text describes a cross-site scripting (XSS) vulnerability in PicsEngine 1.0, where user-supplied input is not properly sanitized. The vulnerability allows arbitrary script execution in the context of the affected site, potentially leading to credential theft or other attacks.