EIP-2026-111368

The exploit demonstrates a reflected XSS vulnerability in Pluxml-Blog 4.2 by injecting a malicious payload into the 'p' parameter of the auth.php script. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.