EIP-2026-113036

The provided text describes a cross-site scripting (XSS) vulnerability in vCard, where user-supplied input is not properly sanitized in the 'page' parameter of 'toprated.php' and 'newcards.php'. The vulnerability allows arbitrary script execution in the context of the affected site.