EIP-2026-114453

The exploit demonstrates a reflected XSS vulnerability in XOOPS by injecting a malicious script via the 'uid' parameter in the 'view_photos.php' module. The payload executes arbitrary JavaScript in the context of the affected site, potentially stealing cookies or performing other malicious actions.