EIP-2026-113411

The provided text describes a cross-site scripting (XSS) vulnerability in WHMCS 5.0, where user-supplied input is not properly sanitized, allowing attackers to inject malicious scripts. The example URL demonstrates how an attacker could exploit this vulnerability by injecting arbitrary code into the 'action' parameter.