EIP-2026-118712

This exploit demonstrates an XSS vulnerability in KingSoft Web Shield that allows remote code execution by injecting malicious JavaScript into an alert dialog. The PoC shows how an attacker can craft a URL to execute arbitrary system commands via the `CallCFunc` function.