EIP-2026-112606

This exploit demonstrates a cross-site scripting (XSS) vulnerability in TestLink 1.8.5 by injecting malicious JavaScript into the 'order_by_login_dir' parameter. The payload triggers an alert dialog, proving arbitrary script execution in the context of the affected site.