EIP-2026-111427

The provided text describes a cross-site scripting (XSS) vulnerability in PostNuke's 'Reviews' module, specifically in the 'title' parameter. The example URL demonstrates how an attacker could inject malicious JavaScript to steal cookie-based authentication credentials.