EIP-2026-112698

The exploit demonstrates multiple reflected XSS vulnerabilities in Tine 2.0 by injecting malicious JavaScript via unsanitized user input in the 'lang' parameter and path traversal. The PoC URLs trigger arbitrary script execution in the context of the affected website.