EIP-2026-115730

This exploit demonstrates a bypass for the XSS filter in Internet Explorer 9 by using null bytes to obfuscate script tags. The PoC generates an HTML file with a malicious link that, when clicked, executes arbitrary JavaScript despite the filter.