EIP-2026-113258

The exploit demonstrates a cross-site scripting (XSS) vulnerability in WebChat 2.0 by injecting malicious script code via the 'username' parameter in the 'users.php' script. The PoC URL triggers an alert box displaying the user's cookies, confirming the vulnerability.