EIP-2026-111967

The provided text describes a cross-site scripting (XSS) vulnerability in Securimage 3.5, where an attacker can inject arbitrary script code via a crafted URL. The example demonstrates a basic XSS payload that steals cookies.