EIP-2026-112328

The exploit demonstrates a reflected XSS vulnerability in SoftDirec 1.05 by injecting malicious JavaScript via the 'id' parameter in a crafted URL. The payload bypasses basic sanitization using mixed case and encoding to execute arbitrary script code in the context of the affected site.