EIP-2026-112412

This exploit demonstrates an XSS vulnerability in the G/PGP encryption plugin for SquirrelMail by injecting arbitrary JavaScript code into a PGP public key block. The vulnerability arises from insufficient input validation, allowing script execution in the context of the application.