EIP-2026-118344

The exploit demonstrates a directory traversal vulnerability and a cross-site scripting (XSS) vulnerability in Calibre 0.7.34. The directory traversal allows arbitrary file reading via path manipulation, while the XSS allows arbitrary script execution in the context of the affected site.