EIP-2026-111834

The provided text describes a cross-site scripting (XSS) vulnerability in RunCms 2.1, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker can inject arbitrary script code via the 'url' parameter in magpie_debug.php.