EIP-2026-112318

The exploit demonstrates a reflected XSS vulnerability in Softbiz Jobs by injecting a script tag into the 'sbad_type' parameter of the admin/addad.php endpoint. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.