EIP-2026-113434

The exploit demonstrates a cross-site scripting (XSS) vulnerability in Wikiwig 5.01 by injecting a script tag via the 'to_r_list' parameter in the SpellChecker plugin. The payload triggers an alert dialog, confirming the vulnerability.