EIP-2026-112816

The exploit demonstrates a reflected XSS vulnerability in Morris Guestbook by injecting a malicious script via the 'pagina' parameter in the URL. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.