EIP-2026-111449

This exploit demonstrates a cross-site scripting (XSS) vulnerability in PowerEasy 2006 by injecting malicious script code via the 'ComeUrl' parameter in the login page. The PoC uses an 'expression' style attribute to trigger an alert, confirming the vulnerability.