EIP-2026-111461

This exploit demonstrates a reflected XSS vulnerability in Prado Portal 1.2.0 by injecting malicious JavaScript via the 'page' parameter. The PoC uses an img tag with an onerror event to execute arbitrary JavaScript, such as stealing cookies.