EIP-2026-112392

The provided code demonstrates a cross-site scripting (XSS) vulnerability in Spitfire CMS by injecting a malicious script via the 'search' parameter in the URL. This exploit can execute arbitrary JavaScript in the context of the affected site, potentially leading to cookie theft or other client-side attacks.