EIP-2026-118677

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Imatix Xitami's server-side includes test script. The PoC uses crafted HTTP requests with malicious input in the User-Agent and Host headers to trigger arbitrary script execution in a victim's browser.