EIP-2026-112413

The exploit demonstrates a cross-site scripting (XSS) vulnerability in the Virtual Keyboard plugin for SquirrelMail by injecting malicious JavaScript via the 'passformname' parameter. The payload bypasses input sanitization and executes arbitrary script code in the context of the affected site.