EIP-2026-114459

This exploit demonstrates a cross-site scripting (XSS) vulnerability in XOOPS 2.2.5 by injecting a script tag into the 'register.php' URL parameter. The lack of input sanitization allows arbitrary JavaScript execution in the context of the affected site.