EIP-2026-113138

The provided text describes a cross-site scripting (XSS) vulnerability in VoipNow Professional 2.5.3, where user-supplied input is not properly sanitized, allowing arbitrary script execution in the context of the affected site. The example URL demonstrates the vulnerability by injecting an XSS payload via the 'nsextt' parameter.