EIP-2026-112415

The exploit demonstrates a reflected XSS vulnerability in Squiz Matrix by injecting arbitrary JavaScript code via the 'colour' parameter in the colour_picker.php script. The payload executes an alert with the document cookie, confirming the vulnerability.