EIP-2026-111428

The exploit demonstrates a cross-site scripting (XSS) vulnerability in PostNuke's 'user.php' script due to insufficient sanitization of URI parameters. The provided URL injects malicious JavaScript code via the 'uname' parameter, which executes in the context of the victim's browser.