EIP-2026-111863

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the Serendipity Freetag-plugin by injecting malicious JavaScript via the URL parameter. The PoC includes multiple payloads that trigger arbitrary script execution in the context of the affected site.