EIP-2026-114388

The exploit demonstrates a cross-site scripting (XSS) vulnerability in wsCMS by injecting a malicious script into the 'id' parameter of the news.php page. The payload executes arbitrary JavaScript in the context of the affected site, potentially leading to credential theft or other client-side attacks.