EIP-2026-111624

The provided text describes a cross-site scripting (XSS) vulnerability in Qto file manager due to improper input sanitization. The example demonstrates how an attacker could inject arbitrary script code via the 'msg' parameter in the URL.