EIP-2026-111379

The provided text describes a cross-site scripting (XSS) vulnerability in PNG Counter 1.0 due to improper sanitization of user-supplied URI input. The example demonstrates how an attacker could inject arbitrary script code via the 'digit' parameter in a crafted URL.