EIP-2026-112699

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Tiny Portal 1.0 by injecting a malicious script via the 'shouts' parameter in the URL. The script executes arbitrary JavaScript in the context of the affected site, potentially stealing cookie-based authentication credentials.