EIP-2026-112382

The exploit demonstrates a reflected XSS vulnerability in Sphpblog 0.8 by injecting arbitrary JavaScript via unsanitized input in the 'action' and 'entry' parameters. The PoC uses a simple alert payload to confirm execution in the context of the affected site.