EIP-2026-118347

This is a writeup describing a cross-site scripting (XSS) vulnerability in Centrinity FirstClass HTTP Server. The vulnerability is due to insufficient sanitization of the 'TargetName' parameter in the 'Upload.shtml' script, allowing arbitrary HTML or script code execution in a user's browser.