EIP-2026-113406

The exploit demonstrates a cross-site scripting (XSS) vulnerability in WHM's webmail interface by injecting malicious JavaScript via the 'filtername' parameter. The payload triggers an arbitrary script execution in the context of the affected site.