EIP-2026-118730

The provided text describes a cross-site scripting (XSS) vulnerability in P-Synch due to inadequate filtering of HTML code from URL parameters. The example demonstrates how an attacker could inject malicious scripts via the 'css' parameter in the URL.