EIP-2026-111362

The provided text describes a cross-site scripting (XSS) vulnerability in PluggedOut Blog 1.9.9, where user-supplied input is not properly sanitized. The example demonstrates a simple XSS payload via the 'year' parameter in the URL.