EIP-2026-111800

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Roundcube Webmail by injecting arbitrary JavaScript code via the `_task` parameter. The lack of input sanitization allows script execution in the context of the affected site.