EIP-2026-113115

The provided text describes a cross-site scripting (XSS) vulnerability in VirtuaNews Pro 1.0.4, where the application fails to sanitize user-supplied input in the 'username' parameter of the admin.php page. This allows arbitrary script execution in the context of the affected site.